https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:51:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-158208 EUVD-2026-158208 https://cve.radiocsirt.org/vuln/euvd-2026-158208 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2352 <p>A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.</p> <p>A vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2352 https://cve.radiocsirt.org/vuln/ghsa-x2vg-5wrf-vj6v <p><strong>Affected:</strong> Go: github.com/1Panel-dev/1Panel</p> <p>1Panel is vulnerable to command injection. This vulnerability has been classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.</p> <p><strong>Affected:</strong> Go: github.com/1Panel-dev/1Panel</p> <p>1Panel is vulnerable to command injection. This vulnerability has been classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.</p> https://cve.radiocsirt.org/vuln/ghsa-x2vg-5wrf-vj6v https://cve.radiocsirt.org/vuln/gsd-2024-2352 gsd-2024-2352 https://cve.radiocsirt.org/vuln/gsd-2024-2352