#cwe-78

共收录 1628 条相关情报。

漏洞预警2026-08-31 发布INFO

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ve_mgr.cgi. This manipulati...

CVE-2026-82690

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown funct

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the comp...

CVE-2026-82689

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown f

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtual_vol.cgi...

CVE-2026-82688

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions....

CVE-2026-82678

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-08-31 发布INFO

diem-project diem Administrative Console actions.class.php executeCommand os command injection

CVE-2026-82678

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/Command...

CVE-2026-82668

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-08-31 发布INFO

klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection

CVE-2026-82668

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77 #cwe-78

安全公告2026-08-30 发布INFO

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-08-30 发布INFO

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library func...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS comman...

CVE-2026-75486

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .verv

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_smtp_test_post handler incorpo...

CVE-2026-75123

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in ...

CVE-2026-75122

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_po...

CVE-2026-75121

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate comman...

CVE-2026-55673

PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandEx

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-88

漏洞预警2026-08-28 发布INFO

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/pr_checker.yml places github.head_r...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands vi...

CVE-2026-37751

An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

CVE-2026-82082

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inje

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through...

CVE-2026-38822

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint becaus...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-28 发布INFO

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system c...

CVE-2026-78037

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-78