Lucene search
+L

9472 matches found

Kitploit
Kitploit
added 2026/09/16 8:14 a.m.6 views

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC Remote Command Injection 📌 Overview CVE-2025-60021 is a critical remote command injection vulnerability found in the heap profiler built-in service /pprof/heap of Apache bRPC versions earlier than 1.15.0 , allowing unauthenticated attackers to run arbitrary OS...

8.7AI score0.25711EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 2:30 a.m.9 views

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami root@kitploit: test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 root@kitploit: test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 byte...

7.8CVSS7.5AI score0.94921EPSS
SaveExploits155References1
Kitploit
Kitploit
added 2026/09/16 12:06 a.m.10 views

CVE-2024-55963

CVE‑2024‑55963 PoC de RCE en Appsmith Exploit PoC para CVE‑2024‑55963 que ejecuta comandos arbitrarios o lanza una reverse shell en instancias Appsmith vulnerables. Maneja automáticamente tanto servidores modernos con la función environmentId como versiones mucho más antiguas «legacy» anteriores ...

6.5CVSS8.5AI score0.30657EPSS
SaveExploits4
Vulnrichment
Vulnrichment
added 2026/09/15 9:01 p.m.6 views

CVE-2026-10144 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

7.8CVSS0.01648EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 8:17 p.m.8 views

CVE-2026-76675

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise...

9.1CVSS0.01451EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:54 p.m.7 views

cve-2025-66478_rce_vulnerable

Modern Blog with shadcn/ui A modern and elegant blog built with Next.js 16, React 19, shadcn/ui and Tailwind CSS. IMPORTANT: Next JS VULNERABLE project created solely for educational, testing and exploitation purposes, NOT RECOMMENDED FOR PRODUCTION DEPLOYMENT, ONLY FOR LOCAL OR CONTROLLED...

7.7AI score
SaveExploits112
RedhatCVE
RedhatCVE
added 2026/09/15 3:08 p.m.6 views

CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

7.3CVSS6AI score0.00215EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 11:17 a.m.6 views

CVE-2026-57133

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, the shell helper exported from src/praisonai-ts/src/tools/utility-tools.ts checks only the first whitespace-delimited token against safeCommands and then passes the complete original string to childprocess.exec. A string that starts...

8.8CVSS0.00436EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/15 10:21 a.m.23 views

CVE-2026-57136

PraisonAI (npm praisonai), a multi-agent teams system, contains a sandbox allowlist bypass in CommandValidator within sandbox-executor.ts. The validator checks only the first whitespace-delimited token against allowedCommands, while SandboxExecutor passes the entire command string to sh -c. An at...

8.8CVSS5.9AI score0.0039EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/15 9:16 a.m.7 views

CVE-2026-80217

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...

8.8CVSS0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 8:50 a.m.15 views

CVE-2026-80217

A hidden functionality issue in Liteon FF-RFI079I4 and FF-RFI078I4 devices allows a user who can log in via SSH and access enable mode to execute arbitrary OS commands , leading to high impact on confidentiality, integrity, and availability (CVSS 3.0: 8.8 HIGH ). The CISA SSVC rating indicates no...

8.8CVSS8.1AI score0.00284EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/09/15 6:50 a.m.9 views

Multiple vulnerabilities in Lite-On O-RU "FF-RFI079I4" and "FF-RFI078I4"

Overview O-RU "FF-RFI079I4" and "FF-RFI078I4" provided by LITE-ON Technology Corporation contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2026-77853 Hidden Functionality CWE-912 - CVE-2026-80217 Yuto Aono, Yutaro Osako, and Shunsuke Saruwatari of The University of...

8.8CVSS0.01029EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/14 9:06 p.m.7 views

EUVD-2026-78149

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

6.3CVSS6.3AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 9:06 p.m.32 views

CVE-2026-14276 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macro RunProgram action...

6.3CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 7:45 p.m.13 views

CVE-2026-16466

CVE-2026-16466 affects IBM DataStage on Cloud Pak for Data version 5.4.0.0 , where an OS command injection flaw (CWE-78) allows a remote authenticated attacker to execute arbitrary commands with a CVSS score of 8.8 (HIGH) , impacting confidentiality, integrity, and availability. The vulnerability...

8.8CVSS6.5AI score0.0091EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 7:43 p.m.15 views

CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability where improper neutralization of special characters in the PxPeek name property allows a remote authenticated attacker to execute arbitrary OS commands . The CVSS 3.1 score is 8.8 (High) with a network vector, low complexity, an...

8.8CVSS6.4AI score0.00423EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.11 views

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

9.2CVSS7.2AI score0.00515EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/14 2:19 p.m.25 views

CVE-2026-57125

PraisonAI is a multi-agent teams system exposed as pip packages praisonai and praisonaiagents. The vulnerability chains two weaknesses: the POST /api/v1/runs Jobs API endpoint lacks authentication (missing Depends(verify_token)), and an attacker-controlled approve field in the submitted workflow ...

9.8CVSS6AI score0.00413EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/09/14 11:20 a.m.8 views

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

8.1CVSS7.5AI score0.00358EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/14 7:17 a.m.10 views

CVE-2026-82777

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.8CVSS0.01186EPSS
SaveExploits0References2
Rows per page
Query Builder