88167 matches found
CVE-2024-3400
CVE-2024-3400: OS Command Injection Vulnerability Description: CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject...
CVE-2020-2034-POC
CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...
CVE-2019-11539
CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2
CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 A critical RCE vulnerability in MCPJam Inspector 3.Start the exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4.For better usage I recomend to update the terminal to a fully funcional one , otherwise u wont be able to use commands like ctrl^...
CVE-2026-23744-RCE
MCPJam Inspector v1.4.2 - RCE Exploit Vulnerability Description MCPJam Inspector contains an unauthenticated Remote Code Execution RCE vulnerability in the /api/mcp/connect endpoint. The vulnerability allows attackers to execute arbitrary commands by sending a malicious MCP server configuration...
CVE-2019-0232-EXP
CVE-2019-0232-EXP Test environment: Win10 Home 1809, jre version 18.3 build 10.0.2+13, Tomcat version 9.0.13. Affected Tomcat Versions ★Apache Tomcat 9.0.0.M1 to 9.0.17 ★Apache Tomcat 8.5.0 to 8.5.39 ★Apache Tomcat 7.0.0 to 7.0.93 Configuration conf/web.xml root@kitploit: cgi...
CVE-2026-78424 OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...
EUVD-2026-88224
Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies write permission or anyone with access to NeuVector’s internal gRPC certificate key pair the ability to inject OS commands in the privileged enforcer container, which can lead to the...
CVE-2026-78424
Improper parameter handling in NeuVector allows for OS command injection within the privileged enforcer container, potentially leading to a complete compromise of the worker node. This vulnerability affects NeuVector versions 5.4 before 5.4.11 , 5.5 before 5.5.4 , 5.6 before 5.6.2 , and potential...
patch-CVE-2026-04321
Patch: CVE-2026-04321 Vulnerability Details CVE : CVE-2026-04321 Product : Zyxel firewall Description : OS command injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CIS...
CVE-2020-28243
CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...
CNVD-C-2019-48814-CNNVD-201904-961
CNVD-C-2019-48814 y CNNVD-201904-961 Gracias a t00ls-ximcx0101 por proporcionar el script CNVD-C-2019-48814 POC Summary Los enlaces relacionados son los siguientes: El artículo de Jian Shu del maestro 清水川崎: https://www.jianshu.com/p/c4982a845f55 Reenviado por 安全祖师爷: https://dwz.cn/2GQvbUae Debido...
CVE-2022-1292
CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...
CVE-2024-46658
CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Vulnerabilidad de Inyección de Comandos Uso 1- Edita la URL en el script. 2- Edita el valor de CookieLogin en el script. 3- Ejecuta el script, te permitirá ejecutar comandos. Detalles de la Vulnerabilidad GET...
CVE-2007-2447-in-Python
CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...
POC-CVE-2026-19681
CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...
CVE-2023-34152
CVE-2023-34152 Vulnerabilidad RCE que afecta a ImageMagick 6.9.6-4. Esta vulnerabilidad permite al atacante ejecutar comandos en el sistema de la víctima, permitiendo así la ejecución remota de comandos. Este es un POC inspirado en el descubrimiento de CVE-2023-34152 por fullwaywang. Divulgación ...
CVE-2023-28343
CVE-2023-28343 Altenergy Power System Control Software settimezone RCE Vulnerability CVE-2023-28343 Chinese name: Altenergy Power System Control Software settimezone 远程命令执行漏洞（CVE-2023-28343） CVSS core:9.0 Description : Altenergy Power System Control Software is a microinverter control software fr...
