88910 matches found
cve-2025-11142-axis-mediaclip-rce
CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...
CVE-2020-11851
CVE-2020-11851 Vulnerabilidad de ejecución remota de código en ArcSight Logger a través de ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Resumen Ejecutivo Antecedentes de la vulnerabilidad ArcSight Logger es una solución integral de gestión de registros que facilita e...
Node.js-CVE-2024-39943
Vulnerabilidad de ejecución de comandos en HFS basado en Node.js CVE-2024-39943 Escuela White Hat 3ª promoción – 노정민 @JenmrR Resumen En el entorno del servidor HFS basado en Node.js, existe una vulnerabilidad que ejecuta el contenido de los archivos subidos mediante childprocess.execSync. Un...
CVE-2007-2447
CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3 are subject for Remote Command Injection Vulnerability CVE-2007-2447, allows remote attackers to execute arbitrary commands by specifying a username containing shell meta characters...
CVE-2014-0196
See https://vulners.com/cve/CVE-2014-0196...
CVE-2020-35729
Información Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...
CVE-2025-34030-PoC
CVE-2025-34030 - sar2html 'plot' parameter RCE CVSS: 10.0 Critical Vulnerability: OS Command Injection Programming Language: PHP Exploit Code: Python References: https://nvd.nist.gov/vuln/detail/CVE-2025-34030 https://www.vulncheck.com/advisories/sar2html-command-injection Description sar2html...
CVE-2025-27636-Practical-Lab
🛡️ CVE-2025-27636 — Laboratorio Práctico de Explotación para Apache Camel 🔍 Resumen CVE-2025-27636 es una vulnerabilidad crítica de Ejecución Remota de Código RCE en Apache Camel , específicamente en el componente camel-exec. Surge de un problema sutil pero peligroso: DefaultHeaderFilterStrategy...
CVE-2019-19781
CVE-2019-19781 Citrix ADC Remote Command Execution Reference: https://www.exploit-db.com/exploits/47901...
CVE-2026-55157
The token-optimizer-mcp software is vulnerable to OS command injection in the smart_user tool (specifically the get-user-info operation) prior to version 5.1.0 . The root cause is the unsafe interpolation of a user-controlled username argument into a shell command executed via execAsync(). Becaus...
CVE-2026-55157 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...
CVE-2026-75600
FreePBX, an open-source IP PBX, is vulnerable to Host Command Injection in versions prior to 17.0.9 . The vulnerability exists in the GraphQL api module's documentation generator , which accepts an authenticated host parameter and incorporates it into a shell command without proper validation or ...
CVE-2026-75600 FreePBX: Authenticated API generatedocs Host Command Injection
FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...
CVE-2026-54674
The FreePBX open source IP PBX is vulnerable to authenticated command injection in the User Control Panel (UCP) interface prior to versions 16.0.39 and 17.0.7 . The root cause is insufficient sanitization of specific URL parameters, which allows an authenticated user to execute arbitrary commands...
letsdefend-cve2024-3400-case-study
letsdefend-cve2024-3400-case-study Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance. CVE-2024-3400 Incident Investigation 🔍 Overview This repository...
CVE-2024-24576-PoC-BatBadBut
CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerability "BatBadBut" Information After running the script will ask you for an argument, the argument will be passed the the bat file, if you close the argument with " and after that & you can run any Windows command. For example: helloworld...
CVE-2026-58455-PoC
CVE-2026-58455 — RCE no autenticado en Dockwatch bypass de autenticación + inyección de comandos Prueba de concepto para CVE-2026-58455 : ejecución remota de código no autenticada en Dockwatch de Notifiarr, una interfaz web autohospedada para la gestión de contenedores Docker. Afecta a todas las...
CVE-2026-52618
CVE-2026-52618 — @webfer/mcp-ansible-drupal: OS command injection via executeDeployment extra vars spawncmd0, cmd.slice1, shell: true re-joins an argument array into a single /bin/sh -c string without escaping, so a shell metacharacter in an extraVars value supplied to the executeDeployment MCP...
CVE-2026-34910-unifi-poc
UniFi OS CVE Proof of Concept Proof of concept for authorized testing of two vectors identified as: CVE-2026-34910: auth bypass that can lead to command injection and remote code execution via the package update handler. CVE-2026-34909: path traversal that can lead to arbitrary file read via the...
