共收录 1628 条相关情报。
← 返回所有主题CVE-2026-76060
An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HT
CVE-2026-38822
In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client s
CVE-2026-38820
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas
CVE-2026-76060
An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HT
CVE-2026-81698
openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI bl
CVE-2026-81097
The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with repl
CVE-2026-57499
Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log
CVE-2026-81698
openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI bl
CVE-2026-81097
The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with repl
CVE-2026-81562
A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the fi
CVE-2026-74233
Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE242
CVE-2026-80214
LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can exec
CVE-2026-80214
LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can exec
CVE-2026-80138
ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to s
CVE-2026-80138
ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to s
CVE-2026-79792
A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file sr
CVE-2026-65099
NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS comma
CVE-2026-65096
NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS
CVE-2026-65091
NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection.
CVE-2026-65090
NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS com