#cwe-78

共收录 1648 条相关情报。

← 返回所有主题
漏洞预警2026-05-12 发布INFO

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a rest...

CVE-2026-23820

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authentic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-41613

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by advers...

CVE-2026-43991

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and pa...

CVE-2026-43990

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

CVE-2026-45087

# GHSA: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode ## Summary When dalfox is start

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-12 发布INFO

protobuf.js is Vulnerable to OS Command Injection in the CLI

CVE-2026-42290

## Summary `pbts` invoked JSDoc by building a shell command string from input file paths and executing it through `chil

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布HIGH

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the...

CVE-2026-7256

Zyxel WRE6505 v2 无线中继器固件版本 V1.00(ABDV.3)C0 中存在一个命令注入漏洞(CVE-2026-7256)。该漏洞位于 CGI 程序中,未经认证的相邻攻击者可通过向设备发送特制的 HTTP 请求,在目标设备上

历史摘要 · 未重新核验 · NVD

安全公告2026-05-11 发布INFO

WebdriverIO BrowserStack Service has a Command Injection issue

CVE-2026-25244

### Summary A command injection vulnerability exists in `@wdio/browserstack-service` that allows remote code execution (

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-11 发布INFO

A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters ...

CVE-2026-4802

A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the h

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. ...

CVE-2026-8273

A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_con

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulati...

CVE-2026-8272

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/...

CVE-2026-8271

A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file of the file /goform/getLogFile of the component httpd. T...

CVE-2026-8265

A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is the function get_log_file

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Exe...

CVE-2026-8264

A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan o

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd....

CVE-2026-8263

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /goform/telnet of the component httpd. The manipulation of t...

CVE-2026-8259

A vulnerability has been found in Tenda AC6 2.0/15.03.06.23. The affected element is an unknown function of the file /go

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-10 发布INFO

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Ha...

CVE-2026-8235

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-10 发布INFO

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr ...

CVE-2026-8230

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-10 发布INFO

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argume...

CVE-2026-8229

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-10 发布INFO

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_...

CVE-2026-8228

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-

历史摘要 · 未重新核验 · NVD