A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. ...

CVE-2026-8227

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Perf...

CVE-2026-8217

CVE-2026-8217 是影响 IAS Canias ERP 8.03 的一个操作系统命令注入漏洞。该漏洞存在于 RMI 接口中，具体位于 Runtime.getRuntime.exec 函数。攻击者可以通过向 troiaCode 参数

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of th...

CVE-2026-8192

A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of t

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/...

CVE-2026-8191

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_u...

CVE-2026-8190

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file

历史摘要 · 未重新核验 · NVD

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argu...

CVE-2026-8189

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater o

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_...

CVE-2026-8188

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the fi

历史摘要 · 未重新核验 · NVD

@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module

Security Advisory: OS Command Injection in profullstack/mcp-server domain_lookup Module Field | Value -- | -- Project

历史摘要 · 未重新核验 · GitHub Advisory

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path op...

CVE-2026-44656

Vim是一个开源命令行文本编辑器。在版本9.2.0435之前，Vim的:find命令路径补全功能存在操作系统命令注入漏洞。当路径(path)选项包含反引号包裹的shell命令时，这些命令会在文件名补全过程中被执行。由于path选项缺少P_S

历史摘要 · 未重新核验 · NVD

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, all Docker container management endpoints i...

CVE-2026-42454

Termix 是一个基于 Web 的服务器管理平台，提供 SSH 终端、隧道和文件编辑功能。在 2.1.0 之前的所有版本中，所有 Docker 容器管理端点直接将 URL 路径参数 containerId 和 WebSocket 消息字段

历史摘要 · 未重新核验 · NVD

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By induci...

CVE-2026-42307

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists

历史摘要 · 未重新核验 · NVD

Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

CVE-2026-43943

### Impact A code execution (RCE) vulnerability exists in electerm's SFTP open with system editor or "Edit with custom

历史摘要 · 未重新核验 · GitHub Advisory

PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mc...

CVE-2026-41497

PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not a

历史摘要 · 未重新核验 · NVD

DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to exec...

CVE-2022-50994

DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login han

历史摘要 · 未重新核验 · NVD

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.21.1 allows unauthenticated attacker to craft commands that will execute cod...

CVE-2026-8153

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.21.1 allows unauthe

历史摘要 · 未重新核验 · NVD

An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php (when the "api" parameter is set) is not ...

CVE-2025-67888

An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /

历史摘要 · 未重新核验 · NVD

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's update(), a...

CVE-2024-51092

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr

历史摘要 · 未重新核验 · NVD

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search ...

CVE-2022-45899

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as

历史摘要 · 未重新核验 · NVD

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP ...

CVE-2026-43943

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code

历史摘要 · 未重新核验 · NVD

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server b...

CVE-2026-42271

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before vers

历史摘要 · 未重新核验 · NVD