#cwe-78

共收录 1612 条相关情报。

漏洞预警2026-10-26 发布MEDIUM

A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts...

CVE-2026-116109

A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleto

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-24 发布CRITICAL

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the compo...

CVE-2026-115995

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f

来源摘录 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-10-23 发布INFO

virtualenv: Bash prompt values can change meaning under older compatibility modes

CVE-2026-113723

## Summary Caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must inf

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #severity:high

安全公告2026-10-23 发布INFO

virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)

CVE-2026-115586

## Summary The bash activator puts the caller-supplied prompt value into `PS1` unescaped whenever `promptvars` is off a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #severity:high

漏洞预警2026-10-23 发布HIGH

An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting ar...

CVE-2026-52356

An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布HIGH

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `$\\n\r]) omitted single-quote, double-quote, redirect ope...

CVE-2026-39902

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布HIGH

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShel

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布INFO

OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process ...

CVE-2026-114355

OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布INFO

Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a l...

CVE-2026-114354

Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C

来源摘录 · NVD

#cve #cwe-78 #cwe-862

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-d...

CVE-2026-57142

PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a

来源摘录 · NVD

#cve #cwe-78 #cwe-863 #cwe-94

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write...

CVE-2026-57117

PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgen

来源摘录 · NVD

#cve #cwe-78 #cwe-863

漏洞预警2026-10-23 发布HIGH

PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explici...

CVE-2026-56838

PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks

来源摘录 · NVD

#cve #cwe-693 #cwe-78 #cwe-863

漏洞预警2026-10-23 发布HIGH

Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without...

CVE-2026-115726

Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committin

来源摘录 · NVD

#cve #cwe-78

安全公告2026-10-23 发布INFO

The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the...

CVE-2026-110243

The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

安全公告2026-10-23 发布INFO

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the...

CVE-2026-107861

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepte

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

安全公告2026-10-23 发布INFO

The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one...

CVE-2026-109122

The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when config

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

安全公告2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection")...

CVE-2026-96376

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78

漏洞预警2026-10-22 发布INFO

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud ve...

CVE-2026-96376

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-10-22 发布INFO

Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

CVE-2026-96376

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78

安全公告2026-10-21 发布INFO

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

CVE-2026-113722

## Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console la

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-78 #severity:high