CVE-2022-42496

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

• CWE-78
• CWE-78

• https://github.com/kujirahand/nadesiko3/issues/1325Issue Tracking, Patch, Third Party Advisory
• https://github.com/kujirahand/nadesiko3/issues/1347Issue Tracking, Third Party Advisory
• https://jvn.jp/en/jp/JVN56968681/index.htmlThird Party Advisory
• https://github.com/kujirahand/nadesiko3/issues/1325Issue Tracking, Patch, Third Party Advisory
• https://github.com/kujirahand/nadesiko3/issues/1347Issue Tracking, Third Party Advisory
• https://jvn.jp/en/jp/JVN56968681/index.htmlThird Party Advisory

Published

Dec 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4249A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2022-42490Several OS command injection vulnerabilities exist in the m2…9.8
• CVE-2022-42491Several OS command injection vulnerabilities exist in the m2…9.8
• CVE-2022-42492Several OS command injection vulnerabilities exist in the m2…9.8
• CVE-2022-42493Several OS command injection vulnerabilities exist in the m2…9.8
• CVE-2022-42494Server Side Request Forgery (SSRF) vulnerability in All in O…6.5
• CVE-2022-42497Arbitrary Code Execution vulnerability in Api2Cart Bridge Co…9.8
• CVE-2022-42498In Pixel cellular firmware, there is a possible out of bound…9.8
• CVE-2022-42499In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a p…9.8
• CVE-2022-4250A vulnerability has been found in Movie Ticket Booking Syste…6.1
• CVE-2022-42500In OEM_OnRequest of sced.cpp, there is a possible shell comm…6.7
• CVE-2022-42501In HexString2Value of util.cpp, there is a possible out of b…6.7