#cwe-78

共收录 1648 条相关情报。

漏洞预警2026-05-04 发布INFO

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allow unauthenticated remote attackers to e...

CVE-2026-41922

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cg

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-04 发布INFO

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute...

CVE-2026-42076

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-04 发布INFO

3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to execute arbitrary shell commands in the context of the root u...

CVE-2025-13605

3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to exec

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-04 发布INFO

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the file src/index.ts of the component MCP Interface. Executing ...

CVE-2026-7730

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-05-04 发布INFO

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision...

CVE-2026-42364

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A s

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-05-04 发布INFO

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary...

CVE-2026-42364

An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A s

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-03 发布INFO

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemIn...

CVE-2026-7698

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-02 发布MEDIUM

A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP ...

CVE-2026-7653

CVE-2026-7653 是一个影响 r-huijts 开发的 mcp-server-rijksmuseum（版本 ≤1.0.4）的 OS 命令注入漏洞。该漏洞位于 src/index.ts 文件中的 open_image_in_brow

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-02 发布MEDIUM

A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function download_website of the file src/index.ts of the component MCP Interface. Perfo...

CVE-2026-7642

CVE-2026-7642 影响 pskill9 开发的 website-downloader 工具（版本 ≤0.1.0）。该漏洞存在于 MCP（Model Context Protocol）接口的 src/index.ts 文件中的 do

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-02 发布INFO

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. T...

CVE-2026-7609

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-02 发布INFO

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The e...

CVE-2026-7608

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-02 发布MEDIUM

A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. ...

CVE-2026-7600

ArtMin96 yii2-mcp-server 1.0.2 版本中存在一个 OS 命令注入漏洞。漏洞位于 src/index.ts 文件中的 yii_command_help 和 yii_execute_command 函数中，属于 MC

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-01 发布HIGH

A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1.0. This impacts the function execute_command of the file src/index.ts of the ...

CVE-2026-7593

CVE-2026-7593 是一个影响 Sunwood-ai-labs 开发的 command-executor-mcp-server 组件（版本 0.1.0 及之前）的 OS 命令注入漏洞。该漏洞存在于 src/index.ts 文件中的

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-01 发布HIGH

A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The affected element is an unknown function of the file branch_...

CVE-2026-7590

CVE-2026-7590 是 eyal-gor 开发的 p_69_branch_monkey_mcp 项目中的一个操作系统命令注入漏洞。该漏洞存在于 branch_monkey_mcp/bridge_and_local_actions/r

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-01 发布INFO

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.

CVE-2026-42994

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-05-01 发布INFO

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handl...

CVE-2026-7538

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-05-01 发布INFO

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command...

CVE-2026-7551

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-04-30 发布INFO

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating...

CVE-2026-7551

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-04-30 发布INFO

Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume...

CVE-2026-7461

Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amaz

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-04-30 发布INFO

Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allo...

CVE-2026-7461

Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amaz

历史摘要 · 未重新核验 · NVD

#cve #cwe-78