Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
CVE-2026-54337
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video up
#cwe-88
共收录 215 条相关情报。
← 返回所有主题MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server...
CVE-2026-55887
MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway Y
A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.p...
CVE-2026-90809
A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_comman
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing...
CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESM
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. A...
CVE-2026-90467
aiosmtplib 是 Python 中常用的异步 SMTP 客户端库。CVE-2026-90467 指出，该库在 5.1.3 之前的版本中未能对调用方传入的电子邮件地址进行充分校验，导致攻击者可以把 ESMTP 参数注入到 MAIL F
Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arb...
CVE-2026-89066
Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Arg...
CVE-2026-11765
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Softw
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code...
CVE-2026-0304
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before ...
CVE-2026-71377
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Con
An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafte...
CVE-2026-84256
An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authe
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin...
CVE-2026-86060
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited chara
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be...
CVE-2026-86060
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited chara
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval
CVE-2026-75912
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval
CVE-2026-75913
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. A...
CVE-2026-85626
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff
git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
CVE-2026-85626
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff
GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function constructs an iperf c...
CVE-2026-74237
GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client function
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
CVE-2026-79675
## Vulnerability The fix for CVE-2026-12841 (CWE-88, JVM argument injection) added `_validate_java_options()` to block
Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized acc...
CVE-2026-79685
Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potent
PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate comman...
CVE-2026-55673
PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandEx