#cwe-78

共收录 1647 条相关情报。

漏洞预警2026-07-12 发布INFO

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of t...

CVE-2026-15511

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function sy

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-07-12 发布INFO

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent...

CVE-2026-15496

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-07-12 发布INFO

A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android We...

CVE-2026-15495

A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-07-12 发布INFO

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performin...

CVE-2026-15487

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/syste

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-07-12 发布INFO

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component Firmware Update Handler. Such...

CVE-2026-15486

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-07-12 发布INFO

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /goform/tools_nslookup of the component DNS Lookup Handler. Thi...

CVE-2026-15485

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /gofor

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-07-10 发布INFO

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows...

CVE-2025-30007

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticat

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-07-10 发布INFO

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

CVE-2026-54088

## Overview The Hook Authentication feature in File Browser allows administrators to delegate login verification to an

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-78 #cwe-88 #cwe-306 #severity:critical

漏洞预警2026-07-10 发布INFO

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute arbitrary commands as root by injecti...

CVE-2025-30007

HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticat

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-10 发布INFO

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/appl...

CVE-2026-54149

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-10 发布INFO

PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's built-in -e...

CVE-2026-61434

PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-10 发布INFO

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high ...

CVE-2026-56688

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an O

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-10 发布INFO

R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution functions accept user-controllable file paths with...

CVE-2026-41880

R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command exe

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-10 发布INFO

R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters...

CVE-2026-41876

R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell co

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-07-09 发布INFO

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software...

CVE-2026-0286

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticate

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:medium

安全公告2026-07-09 发布INFO

laravel-backup-restore has an OS Command Injection during database restore

CVE-2026-53932

## Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extra

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-77 #cwe-78 #severity:high

漏洞预警2026-07-09 发布INFO

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root....

CVE-2026-0286

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticate

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-09 发布INFO

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, Coolify's app/Jobs/ApplicationDeploymentJob.php gene...

CVE-2026-59734

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-07-09 发布INFO

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exposed the MCP bridge POST /mcp and POST /mcp/:group endpoi...

CVE-2026-59726

Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo's default docker-compose deployment exp

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-306 #cwe-942

漏洞预警2026-07-09 发布INFO

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepts an attacker-controlled MAIL...

CVE-2026-59721

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in ad

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78 #cwe-915