#cwe-78

共收录 1648 条相关情报。

漏洞预警2026-06-05 发布INFO

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW). On affected platforms, an admin...

CVE-2026-25622

A Captive Portal Custom Handler command injection vulnerability exists in Arista Edge Threat Management - Arista Next Ge

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) due to insecure input validation. This issue ...

CVE-2026-25621

A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Fire

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge Threat Management - Arista Next Generation Firewall (NGFW...

CVE-2026-25620

An encrypted password command injection vulnerability exists in the Captive Portal application framework of Arista Edge

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An att...

CVE-2026-46399

HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0

历史摘要 · 未重新核验 · NVD

#cve #cwe-15 #cwe-73 #cwe-78

漏洞预警2026-06-05 发布INFO

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an OS command injection vulnerability exists in the Git.php library of the HAXcms P...

CVE-2026-46394

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an OS command injection vu

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-06-05 发布INFO

Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a...

CVE-2026-49492

Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not val

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-06-05 发布INFO

Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document -...

CVE-2026-49492

Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not val

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath e...

CVE-2026-45750

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-639

漏洞预警2026-06-05 发布INFO

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version ...

CVE-2026-45748

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath e...

CVE-2026-45744

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to v

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_...

CVE-2026-11341

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boaf

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-06-05 发布INFO

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

CVE-2026-47670

### Summary DbGate is vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-77 #cwe-78 #severity:critical

漏洞预警2026-06-05 发布INFO

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through the libinput-device-group helper. This injection can lead ...

CVE-2026-50265

A flaw was found in libinput. A local attacker with access to /dev/uinput can inject arbitrary udev properties through t

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-05 发布INFO

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, ty...

CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An att

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-04 发布INFO

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lea...

CVE-2026-10873

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation res...

CVE-2026-10872

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulati...

CVE-2026-10871

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injecti...

CVE-2026-10870

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布HIGH

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

CVE-2026-49185

CVE-2026-49185 是 FieldX 移动设备管理 (MDM) 产品中的一个严重漏洞。根据公开描述，该产品的 ADB（Android Debug Bridge）消息主题在处理传入消息时，未对消息中的载荷进行任何验证，直接将用户提供

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-06-04 发布HIGH

ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a val...

CVE-2026-41010

BOSH Director 在处理上传的 release 压缩包时存在命令注入漏洞。具体来说，ReleaseJob#unpack 方法从 release.MF 文件的 'jobs' 数组中直接提取 job 名称（name），该名称由攻击者控

历史摘要 · 未重新核验 · NVD

#cve #cwe-78