exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Exécution de code à distance Roundcube est un logiciel de webmail open-source largement distribué, utilisé par de nombreuses organisations et entreprises dans le monde entier. Le miroir sur SourceForge, par exemple, compte plus de 260 000 téléchargements au cours des 12...

SUSE SLES15 Security Update : ansible-core (SUSE-SU-2026:4154-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4154-1 advisory. - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Tenable has extracted the...

CVE-2026-76866

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...

CVE-2026-76862

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...

CVE-2026-76866

Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...

CVE-2026-76862

Netcore NR255-V (version 1.5.130703) is affected by an OS command argument injection vulnerability in the Nettools tcpdump launch paths , specifically the ntools_start_set_cgi, ntools_tcpdump_start_set_cgi, exe_default, and ntools_proc components. An authenticated attacker (low privileges) can in...

CVE-2026-76862 Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths

Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...

CVE-2026-54337

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...

CVE-2026-54337 Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...

CVE-2026-54337

Fireshare is a self-hosted media and link sharing application. Prior to version 1.6.14 , an argument injection in the video upload function allows an unauthenticated remote attacker to write or overwrite system files, resulting in high impact on confidentiality, integrity, and availability (CVSS ...

CVE-2026-54337 Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...

CVE-2021-33564

CVE-2021-33564 PoC CVE-2021-33564（Dragonfly Ruby Gem における引数インジェクション）のエクスプロイトスクリプト。 使用方法 任意ファイル読み取り python3 poc.py -u https:///system/refinery/images -r /etc/passwd 任意ファイル書き込み python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:// 詳細については、ブログをご覧ください。...

CVE-2026-24061-Telnetd

CVE-2026-24061 Contournement d'authentification Telnetd GNU Inetutils CVE : CVE-2026-24061 Sévérité : Critique CVSS : 9,8 Critique CWE : CWE-88 — Neutralisation inappropriée des délimiteurs d'arguments dans une commande Composant concerné : telnetd GNU Inetutils Versions concernées : 1.9.3 à 2.7...

CVE-2026-55887 MCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docker:// references and catalog snapshot...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Évaluation de vulnérabilités et OSINT : CVE-2012-1823 Mon dépôt documente le processus d'identification, d'analyse et de collecte de renseignements open source OSINT sur une vulnérabilité de sécurité spécifique détectée lors d'un scan réseau cible. Aperçu du processus Le flux de travail mené au...

prefect-cve-2026-5366

PoC : CVE-2026-5366 – Injection d’arguments Git dans Prefect GitRepository Vulnérabilité : injection d’arguments Git menant à une exécution de code via commitsha plus injection d’arguments via directories Version : vulnérable en 3.6.23, corrigée en 3.6.25+ Fichier : src/prefect/runner/storage.py...

CVE-2012-1823

CVE-2012-1823 - Injection d'arguments CGI PHP - Exécution de code à distance RCE Sévérité : Critique CVSS 9.8 CVE : CVE-2012-1823 Publié : 11 mai 2012 Logiciel affecté : PHP fonctionnant en mode CGI php-cgi Type de vulnérabilité : Injection d'arguments / Exécution de code à distance RCE Vecteur...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

Important: Red Hat Security Advisory: ansible-core security update

An update for ansible-core is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...