Everything Vuln Post has reported about OS command injection: 7 stories, newest first. Part of our Vulnerabilities coverage.
Authenticated attackers can execute arbitrary code on Totolink X2000R routers running specific firmware versions via a high-severity injection vulnerability.
A high-severity vulnerability in Tektronix oscilloscopes allows remote attackers to execute arbitrary commands with elevated privileges on affected devices.
A critical flaw in the Node.js webp-converter library allows attackers to run system commands via crafted file names or option strings.
Attackers can run system commands via crafted audio paths in transcribe2texts up to version 1.0.6. The NVD rates this flaw as critical.
A critical command injection vulnerability in TR7 ASP requires immediate version checks for both virtual and physical deployment models.
A critical OS command injection in Adobe Experience Manager lets low-privileged users run code without interaction. No patch is confirmed yet.
A remote code execution vulnerability in Linksys E1700 firmware allows attackers to inject operating system commands via IPv6 configuration inputs.