CVE-2026-106513

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

proftpd_bypass

This tool uses a specially craffted chain of commands to exploit CVE-2015-3306 and bypass the authentication system of ProFTPD's modcopy. It can be downloaded here you will need to run it from the command line Usage: proftpdbypass target port lcopy within target/rcopy to target lpath rpath...

CVE-2026-103778

Dell Command | Configure DCC, versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

SpotifyC2

SpotifyC2 — Cloud-Based Command Channel Research Execute commands through a Spotify playlist and receive command output through Telegram. What is SpotifyC2? SpotifyC2 is a Windows-based cybersecurity research project that demonstrates how publicly accessible cloud services can be used as a...

CVE-2026-79815

The ClearPass Policy Manager OnGuard agent is susceptible to a command injection vulnerability. An authenticated remote attacker can exploit this flaw to inject arbitrary commands, potentially resulting in the execution of commands with elevated privileges on the affected Windows endpoint . No sp...

EUVD-2026-93901

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79803 Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

EUVD-2026-93890

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-79803

A command injection vulnerability exists within the API of ClearPass Policy Manager . An authenticated remote attacker could exploit this flaw to escalate privileges and gain administrative control over the affected system. No specific patch version or exploit details are provided in the documents.

CVE-2026-79802 Command Injection Vulnerability in the ClearPass Policy Manager Client Software

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager . An attacker capable of supplying crafted input to the affected software can execute arbitrary commands with elevated privileges on the host. Specific details regarding the vulnerable component, root caus...

EUVD-2026-93889

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

EUVD-2026-93887

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager . A low-privileged authenticated remote attacker could exploit this flaw to achieve remote code execution with elevated privileges on the underlying operating system. No specific patch v...

CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

DCVC2

Discord Voice Channel C2 aka DCVC2 This multi operating system compatible tool was created to leverage Discord's voice channels for command and control operations. This tool operates entirely over the Real-Time Protocol RTP primarily leveraging DiscordGo and leaves no pesky traces behind in text...

CVE-2026-48030

CVE-2026-48030 — Pheditor 中的 OS 命令注入 概述 字段| 详情 ---|--- CVE ID| CVE-2026-48030 产品| pheditor 厂商| Hamid Samak 受影响版本| 2.0.1, 2.0.2, 2.0.3 已修补版本| 2.0.4 严重性| 严重 CVSS 评分| 9.9 CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CWE| CWE-78（OS 命令注入） 发现者| Muslimbek Burxonov 描述 pheditor.php 的终端动作处理器中存在一个严...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 Este repositorio es parte del hgrab-framework dork title: "Zimbra Web Client Sign In" Producto afectado Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 y anteriores Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 y anteriores Instalación Instale...

gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...