#cwe-78

共收录 1628 条相关情报。

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the...

CVE-2026-72738

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoin

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from ...

CVE-2026-72733

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affec...

CVE-2026-13206

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networ

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a craf...

CVE-2026-72589

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running...

CVE-2026-72580

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to e...

CVE-2026-72579

An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布INFO

An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js ...

CVE-2026-72573

An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execut

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-10 发布HIGH

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argum...

CVE-2026-19379

CVE-2026-19379 是 EFM ipTIME AX8004M 路由器（固件版本 15.09.0）中一个已公开披露的 OS 命令注入漏洞。该漏洞位于 CGI 端点 /cgi/d.cgi 的 popen 函数中，由于对参数 fname

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-08-09 发布INFO

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...

CVE-2026-71993

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function tha