Lucene search
+L

9460 matches found

Kitploit
Kitploit
added 2026/09/15 7:54 p.m.7 views

cve-2025-66478_rce_vulnerable

Blog Moderno con shadcn/ui Современный и элегантный блог, построенный на Next.js 16, React 19, shadcn/ui и Tailwind CSS. ВАЖНО: Проект УЯЗВИМОГО Next JS , созданный исключительно для образовательных целей, тестирования и эксплуатации, НЕ РЕКОМЕНДУЕТСЯ К УСТАНОВКЕ В ПРОДАКШЕН, ТОЛЬКО ДЛЯ ЛОКАЛЬНОГ...

7.7AI score
SaveExploits112
Kitploit
Kitploit
added 2026/09/15 7:16 p.m.6 views

CVE-2019-12735-VIM-NEOVIM

CVE-2019-12735-VIM-NEOVIM ИСПОЛЬЗОВАНИЕ Сначала необходимо включить функцию modeline. Для обычных пользователей modeline включён по умолчанию, а для root — отключён. Используйте echo &modeline для проверки статуса: 1 — включено, 0 — выключено. Если он выключен, добавьте set modeline в /.vimrc есл...

9.3CVSS8AI score0.25119EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 6:39 p.m.9 views

CVE-2020-5902

CVE-2020-5902 root@kitploit: / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs Интерфейс управления трафиком...

10CVSS8.5AI score0.99999EPSS
SaveExploits62
RedhatCVE
RedhatCVE
added 2026/09/15 3:08 p.m.6 views

CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

7.3CVSS6AI score0.00213EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 11:17 a.m.6 views

CVE-2026-57133

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-delimited token against safeCommands and then passes the complete original string to childprocess.exec. A string that starts...

8.8CVSS0.00436EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/15 10:21 a.m.23 views

CVE-2026-57136

PraisonAI (npm praisonai), a multi-agent teams system, contains a sandbox allowlist bypass in CommandValidator within sandbox-executor.ts. The validator checks only the first whitespace-delimited token against allowedCommands, while SandboxExecutor passes the entire command string to sh -c. An at...

8.8CVSS5.9AI score0.0039EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/15 9:16 a.m.7 views

CVE-2026-80217

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...

8.8CVSS0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 8:50 a.m.15 views

CVE-2026-80217

A hidden functionality issue in Liteon FF-RFI079I4 and FF-RFI078I4 devices allows a user who can log in via SSH and access enable mode to execute arbitrary OS commands , leading to high impact on confidentiality, integrity, and availability (CVSS 3.0: 8.8 HIGH ). The CISA SSVC rating indicates no...

8.8CVSS8.1AI score0.00284EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/09/15 6:50 a.m.9 views

Multiple vulnerabilities in Lite-On O-RU "FF-RFI079I4" and "FF-RFI078I4"

Overview O-RU "FF-RFI079I4" and "FF-RFI078I4" provided by LITE-ON Technology Corporation contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2026-77853 Hidden Functionality CWE-912 - CVE-2026-80217 Yuto Aono, Yutaro Osako, and Shunsuke Saruwatari of The University of...

8.8CVSS0.01029EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/14 9:06 p.m.7 views

EUVD-2026-78149

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

6.3CVSS6.3AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 9:06 p.m.32 views

CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

6.3CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 7:45 p.m.13 views

CVE-2026-16466

CVE-2026-16466 affects IBM DataStage on Cloud Pak for Data version 5.4.0.0 , where an OS command injection flaw (CWE-78) allows a remote authenticated attacker to execute arbitrary commands with a CVSS score of 8.8 (HIGH) , impacting confidentiality, integrity, and availability. The vulnerability...

8.8CVSS6.5AI score0.0091EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 7:43 p.m.15 views

CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability where improper neutralization of special characters in the PxPeek name property allows a remote authenticated attacker to execute arbitrary OS commands . The CVSS 3.1 score is 8.8 (High) with a network vector, low complexity, an...

8.8CVSS6.4AI score0.00423EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.11 views

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

9.2CVSS7.2AI score0.00515EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/14 2:19 p.m.25 views

CVE-2026-57125

PraisonAI is a multi-agent teams system exposed as pip packages praisonai and praisonaiagents. The vulnerability chains two weaknesses: the POST /api/v1/runs Jobs API endpoint lacks authentication (missing Depends(verify_token)), and an attacker-controlled approve field in the submitted workflow ...

9.8CVSS6AI score0.00413EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/09/14 11:20 a.m.8 views

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

8.1CVSS7.5AI score0.00358EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/14 7:17 a.m.10 views

CVE-2026-82777

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.8CVSS0.01186EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 7:17 a.m.8 views

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

8.8CVSS0.00337EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 7:17 a.m.8 views

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.8CVSS0.01023EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 7:17 a.m.10 views

CVE-2026-82762

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.8CVSS0.01186EPSS
SaveExploits0References2
Rows per page
Query Builder