CVE-2023-22496-PoC

CVE-2023-22496 — PoC de Inyección de Comandos del SO en Netdata Agent Gravedad : Crítica CVSS 9.8 Afectado : Netdata Agent Corregido en : v1.37.0 Tipo : Inyección de Comandos del SO CWE-78 Resumen CVE-2023-22496 es una vulnerabilidad de inyección de comandos del SO en el sistema de notificación d...

I Want Better Reporting on AI Genie Behavior

AI systems are regularly completing tasks in ways that their prompters don't want or intend. Some of them are disturbing, and some of them are dangerous. This is something I've been calling "genie behavior," because I think that really gets at the core of what's happening. I wish the popular pres...

CVE-2026-54161

CVE-2026-54161 PoC Resumen upsmon interpola el valor proporcionado por el servidor, controlable por el atacante,ups.alarm, sin sanitizar, en un comando de shell que ejecuta mediante system. Cuando un dispositivo monitoreado reporta un estado ALARM y el operador ha configurado NOTIFYCMD con EXEC e...

CVE-2026-34038

CVE-2026-34038: Inyección Remota de Comandos Autenticada en Coolify Este repositorio contiene documentación y análisis de CVE-2026-34038 , una vulnerabilidad crítica de inyección de comandos en Coolify. Resumen Una vulnerabilidad autenticada de inyección remota de comandos CWE-78 en Coolify permi...

CVE-2024-55187

Resumen Los parámetros administrativos sensibles no están suficientemente saneados, lo que permite a un atacante envenenar rutas a binarios del sistema. El atacante puede entonces subir archivos CSV peligrosos que pueden ser tratados como archivos PHAR que contienen metacaracteres de shell que...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 Inyección de Comandos del SO Un exploit de prueba de concepto de Inyección de Comandos del SO para la vulnerabilidad en motionEye, una interfaz web para el demonio motion. La vulnerabilidad abusa del parámetro de configuración imagefilename, el...

CVE-2023-29084

CVE-2023-29084 Inyección de comandos en ManageEngine ADManager Plus PoC POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64;...

CVE-2026-102911

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been...

cve-2018-1335

Universidad Ankara Yildirim Beyazit - Departamento de Ingeniería Informática CENG 325 - Principios de Seguridad de la Información y Privacidad CENG201 OOP Project Miembros del Grupo @canumay @aslihann @ezgigucuyener @mburakdonmez Referencias NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.1...

CVE-2026-102911 zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-89606

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-102911

A vulnerability exists in zosmaai pi-llm-wiki versions up to 0.11.7 within the wiki_capture_source MCP tool . Specifically, an unknown function in the mcp/index.ts file fails to properly handle the url argument, leading to os command injection . This flaw can be exploited remotely , and a proof-o...

CVE-2026-102911 zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-102911 zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wikicapturesource MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been...

Simulation_CVE-2024-46256

CVE-2024-46256 y CVE-2024-46257 – Simulación de PoC Resumen Este repositorio contiene una Prueba de Concepto PoC paso a paso y respaldada por imágenes que simula dos vulnerabilidades en Nginx Proxy Manager que permiten inyección de comandos del sistema operativo, lo que conduce a ejecución remota...

CVE-2026-102906

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102874

A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/localserver/main.py of the component Execute Endpoint. The manipulation of the argument command/shell leads to os command injection. It is possible to initiate the attack remotely. T...

EUVD-2026-89579

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...

CVE-2026-102906 0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...