CVE-2018-6789-Python3

CVE-2018-6789 Exim 4.90.1 RCE Vulnerability Exim 4.90.1 远程代码执行漏洞的复现，适用于Python3，从命令行传递参数 用法: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...

PT-2026-84865

Name of the Vulnerable Software and Affected Versions Windows ML CLI versions prior to 0.4.0 Description The src/winml/modelkit/serve/cli api.py component exposes commands through a localhost HTTP API without authentication and uses a wildcard for the allow origins setting. This allows a maliciou...

CVE-2024-23897

CVE-2024-23897 Jenkins RCE 任意文件读取 CVE-2024-23897 使用方法: python poc.py http://127.0.0.1:8888/ /etc/passwd 更新: 更新至 Jenkins 2.442, LTS 2.426.3 修复: 如果你无法更新到最新版本，请禁用对CLI的访问，这将完全消除被利用的可能性。...

exploit-CVE-2014-6271

exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...

day03-jenkins-23897

Day 3 — Jenkins CLI arbitrary file read CVE-2024-23897 Idea: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expands @/path inside CLI args. Unauthenticated users can make Jenkins read local files and reflect their first lines via the CLI help output. Fixed in 2.442 / 2.426.3. Build → Run root@kitploit: 1 Build...

CVE-2022-44877-RCE

此存储库没有 README。...

CVE-2026-73782

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73776

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...

CVE-2026-73768

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una función de su analizador de comandos CLI que reemplaza un carácter '@' seguido de una ruta de archivo en un argumento con el contenido del archivo, permitiendo a atacantes no autenticados leer archivos...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 任意文件读取 🤵🏻 受影响版本： Jenkins 2.441 及更早版本。 Jenkins LTS 2.426.2 及更早版本。 一个用 Python 编写的脚本，用于自动化 CVE-2024-23897 漏洞 🤖 🛠️ 此 Python 代码提供了一个针对 Jenkins 服务器特定漏洞（CVE-2024-23897）的扫描器。 它首先请求用户输入 Jenkins 服务器的 URL。 然后，提供下载与 Jenkins 命令行交互所需的 jenkins-cli.jar...

CVE-2025-11953-POC-

CVE-2025-11953 - React Native CLI RCE 研究环境 📋 概述 CVE-2025-11953 是 React Native CLI 的 Metro 开发服务器中的一个严重远程代码执行（RCE）漏洞，由 JFrog 安全团队发现。本研究环境提供了实际的有漏洞实现，用于防御性安全研究、检测开发及缓解测试。 CVSS 评分: 9.8 严重 受影响版本: @react-native-community/cli-server-api v4.8.0 – v20.0.0-alpha.2 修复版本: v20.0.0+（2025年10月发布） 漏洞类型: 通过...

EUVD-2026-69639

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...

CVE-2026-73768

CVE-2026-73768 is a local privilege escalation in the command line interface (CLI) of HPE ArubaOS-CX (AOS-CX) . The root cause is improper processing of malformed input , which can allow a low-privilege local user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.3...

EUVD-2026-69632

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

CVE-2026-73767 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

EUVD-2026-69631

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73753

CVE-2026-73753 is an authenticated remote command injection vulnerability in the HPE ArubaOS-CX (AOS-CX) Command Line Interface . Through affected command-line operations, an authenticated low-privileged user can execute arbitrary commands with privileged user permissions on the underlying operat...

CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

NextJS-Exploit-

NextSploit: Escáner y Explotador de CVE-2025-29927 para Next.js NextSploit es una herramienta de línea de comandos diseñada para detectar y explotar CVE-2025-29927 , una falla de seguridad en Next.js. La herramienta primero identifica si un sitio web objetivo está utilizando Next.js y determina s...