PoC-CVE-2026-9198

Descripción Código de exploit de prueba de concepto para CVE-2026-9198 Entrada en Exploit-DB: https://www.exploit-db.com/exploits/52675 Uso python3 poc.py -u -c...

POC-CVE-2025-68613

Descripción Código de exploit PoC para la vulnerabilidad RCE autenticada en N8N CVE-2025-68613 Uso python3 poc.py -u -c...

POC-CVE-2026-18729

Descripción Código de exploit de prueba de concepto para CVE-2026-18729 Uso python3 poc.py -url -uname -pword -c Sin comando bash prueba de ejecución de código mediante error de división por cero Con comando bash NOTA: La salida de bash no se devuelve porque el endpoint solo devuelve la plantilla...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

POC-CVE-2026-10134

Descripción Código de exploit PoC para CVE-2026-10134 Uso python3 poc.py -u -name -pwd -c...

POC-CVE-2026-0769

Descripción Uso python3 poc.py -u -c Sin comando bash prueba de ejecución de código mediante error de división por cero Con comando bash NOTA: La salida de Bash no se devuelve porque el endpoint solo retorna la plantilla del componente y los metadatos. La salida de Bash se almacena en out dentro...

POC-CVE-2026-0768

Descripción Código de prueba de concepto PoC para CVE-2026-0768 Uso python3 poc.py -u -c...

POC-CVE-2026-5027

Descripción Código de exploit de prueba de concepto para CVE-2026-5027 Uso python3 poc.py -u -c -a "bash command arg Archivo escrito en el disco del contenedor Docker...

CVE-2022-1388

CVE-2022-1388 Comprobación y exploit para CVE-2022-1388 Instalación: root@kitploit: python3 -m pip install -r requirements.txt Uso Individual : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id...

PYSEC-2026-424 Mlflow: Command Injection when serving models with enable_mlserver=True

A command injection vulnerability exists in Mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for command...

MAL-2026-5772 Malicious code in npx-whoami-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0971bcb88de070f17d932feff04cd6e66ecc825f606b412414457a3afb4ad174 The package's only code file index.js, also registered as the package's bin entry unconditionally executes require'childprocess'.execSync"bash -c...

Exploit for OS Command Injection in Gnu Bash

HackTheBox: Shocker Writeup A structured and professional walk...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...

CVE-2026-45152 uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution

uniget is a universal installer and updater for container tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c. Because the check field is loaded directly from untrusted JSON metadata without...

Command Injection

uniget is vulnerable to Command Injection. The vulnerability is due to unsafe execution of the untrusted check field from metadata files through /bin/bash -c without proper validation or sanitization, which allows an attacker to execute arbitrary shell commands on the victim's system...

EUVD-2026-23292

Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...

Snowflake Cortex Code CLI 安全漏洞

Snowflake Cortex Code CLI is an open-source command-line development tool provided by Snowflake. Versions of Snowflake Cortex Code CLI prior to 1.0.25 contained security vulnerabilities. These vulnerabilities were due to improper validation of bash commands, which could allow attackers to execute...

Exploit for CVE-2026-39866

CVE-2026-39866 — Command Injection via unquoted workflow dispa...

CVE-2026-0596

A command injection vulnerability exists in mlflow/mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for...

MLflow 操作系统命令注入漏洞

MLFlow is an open-source platform that simplifies machine learning development. It includes features for tracking experiments, packaging code for reproducible executions, and sharing and deploying models. MLFlow has a vulnerability related to operating system command injection. This vulnerability...