CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

CVE-2026-115805

The Rapid7 Insight Agent on Linux and macOS is vulnerable to local privilege escalation due to improper handling of local filesystem paths. Specifically, a vulnerability exists in the mcp.json configuration path where the Agent's inventory collection may process a crafted path, leading to shell i...

Malicious code in poc-revshell (PyPI)

Source: amazon-inspector 08edc162927c80cde9e467244a435780f65ca95823e97ec73534faf34233ac9a poc-revshell 0.1.0 ships a reverse-shell backdoor that fires both at install time and at import time. setup.py registers a custom install cmdclass PostInstall that starts a daemon thread executing a routine...

LAZYPARIAH

LAZYPARIAH A low-dependency command-line tool for generating reverse shell payloads on the fly. Description LAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag CTF competitions to generate a range of...

CVE-2026-79589

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...

Exploit for CVE-2026-98260

CVE-2026-98260 · Xiaomi 15 dada Android 17 port A tempora...

libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for Google TV Streamer kirkwood / MT8696 Singl...

HIROO

HIROO HIROO is an FUD Remote Administration Tool RAT Generator and Controller HOW TO USE its really easy to use just do this in your terminal git clone https://github.com/E-RROR/HIROO cd HIROO python HIROO.py RUN ON WINDOWS the shell output will be python format you can make it .exe file with...

BIT-VIRTUALENV-2026-113725 virtualenv bash activate runs commands from an environment name with a backslash before $

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: include include include void attributeconstructor init setuid0; system"/bin/bash"; Usage...

CVE-2026-118905

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.2 through 0.40.5, nvmls filters installed versions with a sed program that embeds the requested version pattern in a ... address, escaping . and, since 0.40.4, but not backslash. ...

CVE-2019-2215

CVE-2019-2215 Temproot for Bravia TV via CVE-2019-2215. Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Sony Bravia TV devices running the Android 8 PKG6.0724 firmware with kernel version 4.9.51. For this tool to work...

CVE-2026-118905

Node Version Manager (nvm ) versions 0.31.2 through 0.40.5 are vulnerable to command injection via the nvm_ls function. The root cause is that the sed program used to filter versions does not escape backslashes, allowing a version string containing # (or liga) to close a sed address early and exe...

external-c2-experiments

External C2: SSH A go-exploit external C2 module that supports reverse SSH shells. It additionally acts as a demonstration of how to integrate external C2 profiles to your favorite payloads. The goal is not to provide a fully weaponized payload with evasion and advanced techniques, but show how t...

EUVD-2026-112499

Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticated users to execute shell commands via unescaped folder paths in the storage module's tree command. Attackers can create a directory under upload/files containing shell...

EUVD-2026-112493

CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::linkclicked that allows attackers to execute commands by embedding shell metacharacters in web link URLs. When the non-default Custom Web Link Clicked Action option is enabled, attackers can supply crafted...

CVE-2026-119282: nrwl, @nx: Nx is a monorepo solution for TypeScript and polyglot codebases

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...

CVE-2026-79589

The WIFI4 N300 router Model: T1 Pro v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having a lack of authentication, authorization and access control...