Dokploy password check allows backtick, yields root RCE
On v0.31.0 a member changing a database password can run shell commands as root in the container that holds the host Docker socket.
By nonce#command-injection
Emacs TRAMP zero-click flaw runs local shell commands
Crafted remote-style file names can execute arbitrary local commands during connection setup, with no successful remote login required.
By tarpitOpenStack Ironic Python Agent allows root command execution via NTP config
Unsanitized ntp_server values let project managers run arbitrary commands during ramdisk startup.
By tarpit