poc-rebar3

Iniezione di shell in Rebar3 CVE-2020-13802 Prova di concetto root@kitploit: git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Crediti Alexey Pronin @vulnbe Riferimenti Analisi della vulnerabilità di Rebar3 PR di correzione della vulnerabilità CVE-2020-13802 CWE-78:...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · Iniezione di Comandi di Sistema → RCE Ricercatore: K Tipo di Divulgazione: Divulgazione Responsabile Stato: Corretto Prodotto Interessato: Chamilo LMS 2.0 Confermato su v1.11.32 📋 Riepilogo della Vulnerabilità...

CVE-2026-25089

🚨 CVE-2026-25089 - Iniezione di Comandi OS Critica in FortiSandbox 📖 Panoramica CVE-2026-25089 è una vulnerabilità critica di Iniezione di Comandi OS CWE-78 che colpisce diverse implementazioni di Fortinet FortiSandbox. Un attaccante remoto non autenticato può sfruttare questa falla inviando...

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICO | CWE-78: Iniezione di Comandi del Sistema Operativo | Sfruttato Massicciamente nel Mondo Reale Panoramica CVE-2024-3400 è una vulnerabilità di iniezione di comandi pre-autenticazione nelle interfacce del portal...

CVE-2026-25512

CVE-2026-25512: Esecuzione di codice in remoto tramite iniezione di comandi nel gestore TNEF - Group-Office Vettore CVSS 4.0 : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Indice Riepilogo Versioni interessate Dettagli tecnici Causa principale Flusso dalla sorgente al sink...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine a Versão em Execução no Firewall Palo Alto Networks para o Portal Global Protect Recentemente, muitas vulnerabilidades críticas foram anunciadas pela Palo Alto Networks aqui: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date Este é um P...

CVE-2026-76195

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could result in arbitrary code execution in the context of the current user. The vulnerability is exploitable over the network with low complexity , requires no prior authentication and no user interac...

CVE-2026-76197

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the scope is changed, meaning the vulnerable componen...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox ist eine fortschrittliche Bedrohungsschutzlösung, die isolierte Umgebungen schafft, um verdächtige Dateien, URLs und Netzwerkverkehr auf schädliches Verhalten zu analysieren...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

MovableType - Remote Command Injection

MovableType 5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8. 2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified...

WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read

WGDashboard = 4.2.3 contains a command injection caused by multiple OS command injection points, letting authenticated attackers execute arbitrary commands as root. id: CVE-2026-15733 info: name: WGDashboard = 4.3.2 - Authenticated OS Command Injection /etc/passwd Read author: str4k3r,0xAkoko...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution

SEOWON INTECH SLC-130 and SLR-120S devices allow remote code execution via the ipAddr parameter to the systemlog.cgi page. id: CVE-2020-17456 info: name: SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution author: gy741,edoardottt severity: critical description: SEOWON INTECH...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - RCE non autenticata CVE-2026-22553 | CVSS 9.8 Critico | Autore dell'exploit: Mohammed Idrees Banyamer 📝 Descrizione InSAT MasterSCADA BUK-TS soffre di una vulnerabilità di OS Command Injection non autenticata nell'interfaccia web MMadmServ. Questa falla consente a un...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: iniezione di comandi del sistema operativo tramite runnmapscan Lo strumento MCP runnmapscan costruisce il proprio comando interpolando come stringa i parametri target e additionalFlags e lo esegue tramite childprocess.exec, cioè /bin/sh -c. ⚠ Leggi prima —...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - HAXcms Git.php Iniezione di comandi del sistema operativo CWE-78 Proof-of-concept solo per test di sicurezza autorizzati e ricerca. La vulnerabilità descritta è corretta nell'ultima release di HAXcms. Questo PoC è pubblicato affinché difensori e ricercatori possano verificare il...

MONAI vulnerable to OS command injection

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...