pfsense-wireless-clone

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-wireless-clone pfsense-wireless-clone Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org interfaceswirelessedit.php stores $POST'if' with no allowlist. interfacewirelessclone...

pfsense-sshguard-crlf

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-sshguard-crlf pfsense-sshguard-crlf Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org sshguardthreshold / blocktime / detectiontime are not isnumericint. systemsshguardstart writes...

pfsense-pppoe-cron

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-pppoe-cron pfsense-pppoe-cron Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org handlepppoereset uses hidden ptpid without isnumericint. Custom hour/minute validation is AND where it...

CVE-2026-25512

CVE-2026-25512: Remote Code Execution via Command Injection in TNEF Handler - Group-Office CVSS 4.0 Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Table of Contents Summary Affected Versions Technical Details Root Cause Source to Sink Flow Exploitation Automated Exploit...

WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read

WGDashboard = 4.2.3 contains a command injection caused by multiple OS command injection points, letting authenticated attackers execute arbitrary commands as root. id: CVE-2026-15733 info: name: WGDashboard = 4.3.2 - Authenticated OS Command Injection /etc/passwd Read author: str4k3r,0xAkoko...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution

SEOWON INTECH SLC-130 and SLR-120S devices allow remote code execution via the ipAddr parameter to the systemlog.cgi page. id: CVE-2020-17456 info: name: SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution author: gy741,edoardottt severity: critical description: SEOWON INTECH...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CVE-2026-93349-frictionless-command-injection

CVE-2026-93349: Frictionless = 5.20.0rc1 explore OS Command Injection Severity: High, CVSS 3.1 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: all Frictionless versions = 5.20.0rc1 Component: frictionless.console.commands.explore CWE: CWE-78 OS Command Injection, CWE-20 Imprope...

pfsense-l2tp-radius-mpd

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-l2tp-radius-mpd pfsense-l2tp-radius-mpd Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org vpn.inc interpolates "$radiussecret" quoted but unescaped. PPP client uses getmpdstr; servers...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - HAXcms Git.php OS Command Injection CWE-78 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verify the issue on unpatched...

CVE-2026-25089

🚨 CVE-2026-25089 - Critical OS Command Injection in FortiSandbox 📖 Overview CVE-2026-25089 is a critical OS Command Injection CWE-78 vulnerability affecting multiple Fortinet FortiSandbox deployments. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP...

mediawiki-CVE-2026-100382

Lab reproduction - CVE-2026-100382 ExternalData OS command injection What this lab is MediaWiki 1.43 official image, SQLite + ExternalData3.6.1 last vulnerable, mounted read-only from ../mediawiki-extensions-ExternalData. Loopback only: published on 127.0.0.1:$HOSTPORT default 8080. Anonymous...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary Field| Details ---|--- Product| Chamilo LMS Affected Version| 2.0 Confirmed on v1.11.32...

sqlite-cli-recover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-cli-recover sqlite-cli-recover Class: Command injection Reach: Local SQLite 3.53.4 b09c88c CLI .recover prints hostile sqliteschema.sql as a later dot-command. recoverOneStmt prepares only the first statement. ...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...

CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection

CVE-2026-25546 PoC - godot-mcp OS Command Injection Author: Mohammed Idrees Banyamer GitHub: mbanyamer Date: February 04, 2026 Exploit Title godot-mcp 0.1.1 - OS Command Injection via projectPath CVE CVE-2026-25546 CWE CWE-78 Improper Neutralization of Special Elements used in an OS Command - OS...