Skip to content
BackEsc
Sign in

weakness in Command and Code Injection

OS Command Injection

68 disclosed reports · $53,087 paid

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.

reports
68
paid a bounty
8

Every one of the 68 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. Potential pre-auth RCE on Twitter VPN#591295X / xAI · $20,160 · 1,246 votes
  2. Exposed Kubernetes API - RCE/Exposed Creds#455645Snapchat · $25,000 · 1,191 votes
  3. Webshell via File Upload on ecjobs.starbucks.com.cn#506646Starbucks · 688 votes
  4. 🐞 OS Command Injection at https://sea-web.gold.razer.com/lab/ws-lookup via IP parameter#821962Razer · $2,000 · 676 votes
  5. RCE via github import#1672388GitLab · 271 votes
  6. RCE using bash command injection on /system/images (toimitilat.lahitapiola.fi)#303061LocalTapiola · 209 votes
  7. Remote Code Execution via Extract App Plugin#546753Nextcloud · 124 votes
  8. Possible RCE through Windows Custom Protocol on Windows client#1001255Nord Security · 120 votes
  9. OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)#3637898AWS VDP · 111 votes
  10. Remote Code Execution in ██████#710864U.S. Dept Of Defense · 94 votes
  11. GitLab-Runner on Windows `DOCKER_AUTH_CONFIG` container host Command Injection#955016GitLab · 77 votes
  12. [forum.acronis.com] JNDI Code Injection due an outdated log4j component#1430622Acronis · 74 votes
  13. CVE-2020-7961 RCE Liferay Portal Unauthenticated via https://████████/#2742457U.S. Dept Of Defense · 62 votes
  14. OS Command Injection via egrep in Rake::FileList#651518Ruby · 62 votes
  15. Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10#2817658Trellix · 60 votes
  16. Shell command injection in https://partner.steamgames.com/admin/game/publish/ via screenshot URL#949361Valve · 59 votes
  17. Store Development Resource Center was vulnerable to a Remote Code Execution - Unauthenticated Remote Command Injection (CVE-2019-0604)#536134Starbucks · 57 votes
  18. Remote Code Execution through DNN Cookie Deserialization#876708U.S. Dept Of Defense · 56 votes
  19. Jitsi Desktop Client RCE By Interacting with Malicious URL Schemes on Windows#16926038x8 · $777 · 51 votes
  20. RCE via WikiCloth markdown rendering if the `rubyluabridge` gem is installed#1401444GitLab · $3,000 · 50 votes
  21. Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`#3558713AWS VDP · 48 votes
  22. Shell command injection in https://partner.steamgames.com/bundles/savestore/ via overwriting asset_path_identifier#926169Valve · 47 votes
  23. Reflected XSS and Blind out of band command injection at subdomain dstuid-ww.dst.ibm.com#410334IBM · 42 votes
  24. RCE in ███ [CVE-2021-26084]#1327769U.S. Dept Of Defense · 39 votes
  25. RCE via ssh:// URIs in multiple VCS#260005Internet Bug Bounty · 39 votes
  26. Shell upload in http://widget.support.my.com/#317043Mail.ru · $1,000 · 36 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in