Lucene search
+L

188460 matches found

Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•6 views

PT-2026-113648

The Akamai Guardicore Platform Agent GPA before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting ...

6.7CVSS6.8AI score0.01675EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113639

Improper neutralization of special elements in the NetBird client SSH configuration manager client/ssh/config/manager.go in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide...

8.9CVSS6.4AI score0.00584EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113595

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Samsung Open Source QA-Board allows : OS Command Injection...

9.8CVSS5.9AI score0.01243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•9 views

PT-2026-113700

Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::remove at job without validating it. Schedule::At::remove substitutes the supplied job ID into an at...

8.8CVSS6.4AI score0.01613EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113781

🚨 CVE-2026-101216 Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote executio...

6.6CVSS5.9AI score0.01082EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-114194

🚨 CVE-2026-33789 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP...

9.8CVSS5.9AI score0.00687EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113899

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 23.2R2-S7.7 Junos OS versions prior to 23.4R2-S8.13 Junos OS versions prior to 24.2R2-S5.5 Junos OS versions prior to 24.4R2-S5 Junos OS versions prior to 25.2R2-S2 Junos OS versions prior to 25.4R1-S3 Junos OS...

8.8CVSS6AI score0.03894EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113872

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved affected versions not specified Description An OS Command Injection issue exists in the TACACS component. This allows a low-privileged user authenticated via TACACS+ to execute commands with root privileges,...

9.8CVSS6.4AI score0.02098EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•9 views

PT-2026-113830

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved on PTX Series affected versions not specified Description An OS Command Injection issue exists in the bootzd zero-touch provisioning daemon. An unauthenticated attacker located on the management LAN can execut...

8.8CVSS6AI score0.03916EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•7 views

PT-2026-113819

🚨 CVE-2026-101967 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response. 🎖@cveNotify...

9.3CVSS6.2AI score0.03916EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•8 views

PT-2026-113769

🚨 CVE-2026-0320 A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface...

8.6CVSS6AI score0.00842EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113773

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...

6.9AI score0.01151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•10 views

PT-2026-113762

🚨 CVE-2026-0313 A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints. 🎖@cveNotify...

8.6CVSS6.6AI score0.00833EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2026/10/14 12:00 a.m.•16 views

Moderate: environment-modules security update

The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "modul...

7.3CVSS6AI score0.00222EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/13 11:30 p.m.•16 views

CVE-2020-5902

CVE-2020-5902 / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs The F5 BIG-IP Traffic Management User...

10CVSS8.7AI score0.99999EPSS
SaveExploits62
NVD
NVD
•added 2026/10/13 11:17 p.m.•15 views

CVE-2026-53563

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...

6.9CVSS0.00215EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/13 10:14 p.m.•14 views

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

9.8CVSS8.3AI score0.44333EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/10/13 10:12 p.m.•18 views

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

8.8CVSS7AI score0.04363EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/13 10:07 p.m.•17 views

CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

8.8CVSS7.4AI score0.06345EPSS
SaveExploits10
Cvelist
Cvelist
•added 2026/10/13 10:04 p.m.•16 views

CVE-2026-53563 Persistent Command Execution

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...

6.9CVSS0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder