Improper Neutralization of Special Elements used in a Command ('Command Injection')

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution

• pre-auth RCE
• Инъекция команд

sophos · web appliance4 апр. 2023 г.

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

• pre-auth RCE
• Инъекция команд

php · php11 мая 2012 г.

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

• pre-auth RCE
• Инъекция команд

dlink · dns-320l firmware3 апр. 2024 г.

Deserialization Vulnerability in GoAnywhere MFT's License Servlet

• pre-auth RCE
• Десериализация
• Инъекция команд

fortra · goanywhere managed file transfer18 сент. 2025 г.

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3

• pre-auth RCE
• Инъекция команд

netgear · wnap320 firmware21 апр. 2017 г.

Aria Operations for Networks contains a command injection vulnerability.

• pre-auth RCE
• Инъекция команд

vmware · aria operations for networks7 июн. 2023 г.

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to exe

• pre-auth RCE
• Инъекция команд

al-enterprise · omnipcx enterprise communication server18 сент. 2007 г.

In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbit

• pre-auth RCE
• Инъекция команд

cleo · harmony13 дек. 2024 г.

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an aut

• RCE
• Инъекция команд

ivanti · connect secure12 янв. 2024 г.

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form o

• pre-auth RCE
• Инъекция команд

tp-link · archer ax21 firmware15 мар. 2023 г.

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

• pre-auth RCE
• Инъекция команд

beyondtrust · privileged remote access17 дек. 2024 г.

The D-Link DIR-645 Wired/Wireless Router Rev.

• pre-auth RCE
• Инъекция команд

dlink · dir-645 firmware23 февр. 2015 г.

Arbitrary Command Injection in Smartbedded MeteoBridge

• pre-auth RCE
• Инъекция команд

smartbedded · meteobridge vm21 мая 2025 г.

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

• pre-auth RCE
• Инъекция команд

progress · connection manager for objectscale4 июн. 2026 г.

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1)

• pre-auth RCE
• Инъекция команд

hp · openview network node manager2 сент. 2005 г.

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wil

• pre-auth RCE
• Инъекция команд

dlink · dsl-2750b firmware19 окт. 2022 г.

DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

• pre-auth RCE
• Инъекция команд

draytek · vigor300b firmware27 дек. 2024 г.

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote

• RCE
• Инъекция команд

dlink · dir-823x firmware25 мар. 2025 г.

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.

• RCE
• Инъекция команд

dlink · dcs-4703e firmware2 сент. 2020 г.

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Ex

• pre-auth RCE
• Инъекция команд

microsoft · internet explorer8 янв. 2019 г.

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not

• pre-auth RCE
• Инъекция команд

ui · airos11 июн. 2019 г.

Command Injection Vulnerability in QTS and QuTS hero

• pre-auth RCE
• Инъекция команд

qnap · qts17 апр. 2021 г.

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component

• RCE
• Инъекция команд

tp-link · tl-wr940n firmware7 июн. 2023 г.

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit

• RCE
• Инъекция команд

ivanti · endpoint manager cloud services appliance8 окт. 2024 г.

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an ind

• RCE
• Инъекция команд

symantec · message gateway11 авг. 2017 г.