#cwe-78

共收录 1628 条相关情报。

漏洞预警2026-08-25 发布INFO

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulne...

CVE-2026-65089

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerabilit...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS com

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option b...

CVE-2026-77585

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to tr...

CVE-2026-45018

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0,

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-08-25 发布INFO

Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution

CVE-2026-45018

### Am I affected? Only if your deployment sets `features.mcp.enabled = true` in `.chainlit/config.toml`. **MCP has bee

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #severity:critical

漏洞预警2026-08-25 发布INFO

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login argu...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi...

CVE-2026-76197

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi...

CVE-2026-76195

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ...

CVE-2026-55582

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default se

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_executab...

CVE-2026-55581

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Do

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-183 #cwe-1188

漏洞预警2026-08-25 发布INFO

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC...

CVE-2026-55580

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go init

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-25 发布INFO

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Def...

CVE-2026-79623

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown functi

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-25 发布INFO

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header wit...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication u

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-08-24 发布INFO

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenti

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-08-24 发布INFO

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Ha...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall o

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-24 发布INFO

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may st...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-08-24 发布INFO

An unauthenticated OS command injection vulnerability exists in the parental control...

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, B

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet...

CVE-2026-71943

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerabili

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice...

CVE-2026-71928

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerabil

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-08-24 发布INFO

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade...

CVE-2026-71931

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high