Search Vulnerabilities

Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code Execution

Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection

AidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection

bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

christopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injection

react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

WP Database Backup <= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter

Edimax EW-7478APC POST Request formStaDrvSetup os command injection

Edimax EW-7478APC POST Request formiNICbasic os command injection

Edimax EW-7478APC POST Request formAccept os command injection

D-Link DCS-935L POST Parameter setconf.cgi sub_400E40 os command injection

Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection

antlr ANTLR4 gofmt GoTarget.java GoTarget command injection

File Browser: Command Allowlist Bypass via Shell Metacharacter Injection

Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

Gogs: RCE via git rebase --exec argument injection in pull request merge

Net::IMAP: Command Injection via ID command argument

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

coollabsio coolify Image Name os command injection

Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection