Everything Shell Bulletin has reported about OS Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical gap in TR7 ASP allows attackers to run system commands without logging in, affecting versions below 1.0.1554.2331 and 1.6.1554.2331.
A severe vulnerability in Linksys E1700 firmware allows attackers to execute commands remotely, with no vendor patch currently available.
A critical OS command injection flaw in the Ruby image_optimizer gem allows attackers to run arbitrary system commands via crafted file paths.