CVE Database

CVE-2025-62222 High · 8.8 CWE-77 Nov 11, 2025

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.

CVE-2025-62214 Medium · 6.7 CWE-77 Nov 11, 2025

Visual Studio Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.

CVE-2024-57695 High · 7.7 CWE-77 Nov 11, 2025

Command Injection in Opswat Outpost Security Suite

An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 (4164.652.1856) from December 17, 2012.

CVE-2025-9223 High · 8.8 CWE-77 Nov 11, 2025

Command Injection

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

CVE-2025-63296 Medium · 6.5 CWE-77 Nov 10, 2025

Command Injection in Keruistore Kerui K259 Firmware

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root.

CVE-2025-12155 High · 7.1 CWE-77 Nov 10, 2025

Command Injection in Looker

A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows an attacker with Developer permission to execute arbitrary shell commands when a user is deleted on the host system. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required for these. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted. The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ : * 24.12.100+ * 24.18.192+ * 25.0.69+ * 25.6.57+ * 25.8.39+ * 25.10.22+

CVE-2025-12916 Critical · 9.8 CWE-77 Nov 8, 2025

Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_login of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.11 and 3.0.12 is recommended to address this issue. It is advisable to upgrade the affected component.

CVE-2025-46365 Medium · 6.7 CWE-77 Nov 5, 2025

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be...

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

CVE-2024-51317 Medium · 6.5 CWE-77 Nov 3, 2025

Command Injection in Netsurf-browser Netsurf

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

CVE-2025-61141 High · 7.5 CWE-77 Oct 30, 2025

sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because…

sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands.

CVE-2025-60595 High · 8.2 CWE-77 Oct 29, 2025

SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution.

CVE-2025-1549 Medium · 6.3 CWE-77 Oct 29, 2025

WatchGuard Mobile VPN with SSL Local Privilege Escallation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability is resolved in the Mobile VPN with SSL client for Windows version 12.11.5

CVE-2025-12313 Critical · 9.8 CWE-77 Oct 27, 2025

D-Link DI-7001 MINI msp_info.htm command injection

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-60801 High · 8.2 CWE-77 Oct 24, 2025

Command Injection in Jishenghua Jsherp

jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function.

CVE-2025-58428 Critical · 9.9 CWE-77 Oct 23, 2025

Command Injection in Veeder-Root TLS4B Automatic Tank Gauge System

The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote command execution, full shell access, and potential lateral movement within the network.

CVE-2025-54964 High · 8.4 CWE-77 Oct 23, 2025

Command Injection in Baesystems Socet Gxp

An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may inject arbitrary executables. If the Job Service is configured for local-only access, this may allow for privilege escalation in certain situations. If the Job Service is network accessible, this may allow remote command execution.

CVE-2025-41721 Low · 2.7 CWE-77 Oct 22, 2025

Sauter: Command Injection

A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate.

CVE-2025-56799 Medium · 6.5 CWE-77 Oct 21, 2025

Command Injection in Reolink

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.

CVE-2025-57521 Medium · 6.1 CWE-77 Oct 21, 2025

Bambu Studio 2.1.1.52 and earlier is affected by a vulnerability that allows arbitrary…

Bambu Studio 2.1.1.52 and earlier is affected by a vulnerability that allows arbitrary code execution during application startup. The application loads a network plugin without validating its digital signature or verifying its authenticity. A local attacker can exploit this behavior by placing a malicious component in the expected location, which is controllable by the attacker (e.g., under %APPDATA%), resulting in code execution within the context of the user. The main application is digitally signed, which may allow a malicious component to inherit trust and evade detection by security solutions that rely on signed parent processes.

CVE-2025-10020 High · 8.8 CWE-77 Oct 21, 2025

Command Injection

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component.

CVE-2025-62696 Medium · 6.9 CWE-77 Oct 21, 2025

Multiple critical security issues in Springboard

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master.

CVE-2025-57164 Medium · 6.5 CWE-77 Oct 17, 2025

Command Injection in Flowiseai Flowise

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.

CVE-2025-61514 Medium · 6.5 CWE-77 Oct 16, 2025

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58…

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.

CVE-2025-60855 Medium · 5.1 CWE-77 Oct 16, 2025

Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware…

Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges. NOTE: this is disputed by the Supplier because the integrity of updates is instead assured via a "private encryption algorithm" and other "tamper-proof verification."

CVE-2025-58132 Medium · 6.5 CWE-77 Oct 15, 2025

Zoom Clients for Windows - Command Injection

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of information via network access.