314 matches found
CVE-2025-34187
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...
RootHelper
This is an offensive tool for Linux privilege escalation. The primary CVE ID is not explicitly mentioned, but the tool fetches scripts that aid in privilege escalation, suggesting that it targets vulnerabilities in Linux systems. The tool, called RootHelper, downloads and unzips scripts that...
Exploit for Code Injection in Xwiki
CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki...
Exploit for Improper Access Control in Webmin
Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Enhan...
Exploit for Code Injection in Vmware Spring_Framework
!Spring4shell%20zero%20day%20vulnerabilityhttps://www.holmsec...
CVE-2019-9804
In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...
CVE-2019-19041
An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by...
CVE-2024-13502 A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands.
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...
CVE-2024-13502
CVE-2024-13502 affects Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM. The issue is an OS command injection caused by improper neutralization: the commit_multicast web interface page passes untrusted input to an eval in a bash script, enabling arbitrary shell commands (Local Code...
Exploit for Special Element Injection in Google Android
CVE-2024-0044- CVE-2024-0044: a "run-as any app" high-severity...
CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
TPAS Log4Shell PoC This repository contains a Proof of Concep...
Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management
CVE-2024-7593 Exploit Script This Bash script serves as a pro...
Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking
Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado Security researchers Tara Gould and Nate...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
A Cosmicsting POC...
Exploit for Path Traversal in Chamilo
Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE...
Exploit for Race Condition in Openbsd Openssh
CVE-2024-6387 PoC This Bash script is designed to check if a...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-...