64654 matches found
ROOT-OS-DEBIAN-13-CVE-2026-44169 CVE-2026-44169 in mariadb - Patched by Root
Root has patched CVE-2026-44169 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
CVE-2011-2523
CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...
ROOT-OS-DEBIAN-13-CVE-2025-15366 CVE-2025-15366 in python3.13 - Patched by Root
Root has patched CVE-2025-15366 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-11940 CVE-2026-11940 in python3.13 - Patched by Root
Root has patched CVE-2026-11940 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-15367 CVE-2025-15367 in python3.13 - Patched by Root
Root has patched CVE-2025-15367 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-12781 CVE-2025-12781 in python3.13 - Patched by Root
Root has patched CVE-2025-12781 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-3479 CVE-2026-3479 in python3.13 - Patched by Root
Root has patched CVE-2026-3479 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-0864 CVE-2026-0864 in python3.13 - Patched by Root
Root has patched CVE-2026-0864 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-11972 CVE-2026-11972 in python3.13 - Patched by Root
Root has patched CVE-2026-11972 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-7210 CVE-2026-7210 in python3.13 - Patched by Root
Root has patched CVE-2026-7210 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-15308 CVE-2026-15308 in python3.13 - Patched by Root
Root has patched CVE-2026-15308 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-16348
TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...
EUVD-2026-65007
An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...
CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800
An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...
CVE-2026-9254
An unauthenticated OS command injection vulnerability exists in the parental control functionality of TP-Link Archer BE800 V1, BE3600 V1, and AX75 V1 routers, caused by improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker with no prior access can...
CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...
EUVD-2026-65006
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...
dirtyPipe-automaticRoot
Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: root@kitploit: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: root@kitploit: $...
CVE-2026-71943
DrayTek VigorSwitch multiple models are affected by an OS command injection vulnerability in the setDevNet function. The root cause is insufficient filtering of the username and password fields before they are passed to command execution. A remote attacker with valid administrative credentials fo...
EUVD-2026-65002
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...