88159 matches found
CVE-2019-1010174
CVE-2019-1010174 CImg Library v.2.3.3 - inyección de comandos CVE-2019-1010174 Detalle Modificado Esta vulnerabilidad ha sido modificada desde su último análisis por el NVD. Está pendiente de un nuevo análisis que puede dar lugar a cambios adicionales en la información proporcionada. Descripción...
CVE-2024-48762
CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC root@kitploit: GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX...
CVE-2023-38829-NETIS-WF2409E
CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Router WF2409E PoC de Inyección de Comandos Descripción de la vulnerabilidad: Las funciones ping y traceroute del router NETIS SYSTEMS WF2409E versión V3.6.42541 son susceptibles a ataques de inyección de comandos. Se puede manipular la entrada maliciosa...
CVE-2024-50498
CVE-2024-50498 Versión afectada WP Query Console =1.0 Créditos https://github.com/RandomRobbieBF/CVE-2024-50498 Premisa El tipo de consulta es WPQuery y WP Query Console ejecuta algunas funciones php Uso python .\CVE-2024-50498.py 192.168.41.163 --query "id"...
CVE-2026-40176-poc
CVE-2026-40176: PoC de Inyección de Comandos del Sistema Operativo en Composer Perforce English version Resumen Este repositorio es una Prueba de Concepto PoC para la vulnerabilidad crítica de inyección de comandos del sistema operativo CVE-2026-40176 en el controlador VCS de Perforce de Composer...
CVE-2026-2256-Threat-Model----ms-agent-Command-Injection
CVE-2026-2256-Modelo-de-Amenazas----ms-agent-Inyección-de-Comandos...
Important: Red Hat Security Advisory: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection
A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh...
CVE-2026-4480-POC
CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...
PCP: PCP linux_sockets PMDA: Arbitrary Command Execution via Command Injection
A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers execute arbitrary commands as the PMDA user when metrics refresh...
Important: Red Hat Security Advisory: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2026-101001
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2026-101002
A security flaw exists in Netcore NBR200V2 version 1.3.241127.071246 . The vulnerability is located in the Tools Ping Handler component, specifically within the system function of the /usr/bin/network_tools file. By manipulating the url argument, an unauthenticated remote attacker can trigger an ...
CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...
EUVD-2026-88084
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...
watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604
watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Generador de Artefactos de Detección para Dell UnityVSA CVE-2025-36604 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 Consulte nuestra publicación del blog para obtener detalles técnicos Detección en Acción root@kitploit:...
CVE-2022-22947
CVE-2022-22947 Ejecutar: CVE-2022-22947.exe ip comando Versiones afectadas: Spring Cloud Gateway 3.1.1 Spring Cloud Gateway 3.0.7 Spring Cloud Gateway otras versiones que ya no se actualizan...
CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
EUVD-2026-88083
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2026-101001
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...