CVE-2026-85660

cli-mcp-server 0.2.5 contains a command allowlist bypass in the _validate_command_with_operators function. When ALLOW_SHELL_OPERATORS is enabled, an attacker can inject shell command substitution syntax such as $(...) or backticks to execute commands that are not on the ALLOWED_COMMANDS allowlist...

EUVD-2026-71230

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

zoneminder-rce-poc

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

Exploit for CVE-2024-36057

CVE-2024-36057 — Koha Library Software CVE ID: CVE-2024-3...

CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

Multiple vulnerabilities in XING CPTrans-ME-X

Overview CPTrans-ME-X provided by XING Inc. contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2026-62928 Improper processing of the input through the administrative port may lead to OS command injection. Exposure of Sensitive System Information to an Unauthorized...

EditWrxLite - wrx.cgi RCE

Exploits EditWrxLite command injection via the download parameter of wrx.cgi. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """EditWrxLite wrx.cgi command injection RCE — execute session.""" from future import annotations import re from urllib.parse import quote...

PineApp Mail-SeCure test_li_connection RCE

Exploits command injection in PineApp Mail-SeCure via the iptest parameter on /admin/testliconnection.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PineApp Mail-SeCure testliconnection.php RCE — execute session.""" from future import annotations import re...

Sangfor EDR - slog_client RCE

Exploits unauthenticated command injection in Sangfor EDR 3.2.17R1/3.2.21 via /api/edr/sangforinter/v2/cssp/slogclient JSON params. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor EDR 3.2.17R1/3.2.21 slogclient RCE — execute session.""" from future impor...

AlienVault OSSIM av-centerd RCE (CVE-2014-3804)

Exploits CVE-2014-3804 command injection in the av-centerd updatesysteminfodebianpackage SOAP method. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AlienVault OSSIM av-centerd SOAP RCE CVE-2014-3804 — execute session.""" from future import annotations import r...

ALCASAR Host Header RCE

Exploits ALCASAR command injection via a crafted Host header on /alcasar/index.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ALCASAR Host header command injection RCE — execute session.""" from future import annotations import re from kittysploit import...

AirLive cgi_test.cgi RCE (CVE-2015-2279)

Exploits CVE-2015-2279 OS command injection in /cgitest.cgi via the writetan parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """AirLive cgitest.cgi command injection RCE CVE-2015-2279 — execute session.""" from future import annotations import re from...

CERIO DT - Save.cgi Command Injection RCE

Exploits command injection in the ip field of /cgi-bin/Save.cgi PING operation on CERIO DT series routers. Requires default operator credentials. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """CERIO DT series router Save.cgi command injection — execute...

D-Link DNS-320/325 - system_mgr.cgi SMS Test RCE

Exploits command injection in cgismstest via the command1 parameter on /cgi-bin/systemmgr.cgi distinct from CVE-2020-25506 NTP injection. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DNS-320/325 systemmgr.cgi SMS test RCE — execute session.""" from...

WANem result.php RCE (CVE-2012-10041)

Exploits CVE-2012-10041 command injection in WANem result.php via the pc parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """WANem result.php command injection RCE CVE-2012-10041 — execute session.""" from future import annotations import re from...

Gitlist blame RCE (CVE-2014-4511)

Exploits CVE-2014-4511 command injection in Gitlist blame paths via backtick-wrapped shell metacharacters. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Gitlist blame path command injection RCE CVE-2014-4511 — execute session.""" from future import annotations...

OmniPCX - masterCGI RCE (CVE-2007-3010)

Exploits CVE-2007-3010 by injecting OS commands into the user parameter of /cgi-bin/masterCGI. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Alcatel-Lucent OmniPCX masterCGI RCE CVE-2007-3010 — execute session.""" from future import annotations import re from...

Apache Spark doAs Command Injection RCE (CVE-2022-33891)

Exploits CVE-2022-33891 command injection in the Spark ACL check when spark.acls.enable is true. Sends a crafted doAs POST parameter to run arbitrary shell commands as the Spark process user. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Spark doAs command injection RCE CVE-2022-33891 —...

Webmin password_change.cgi RCE (CVE-2019-15107)

Exploits CVE-2019-15107 unauthenticated command injection in the passwordchange.cgi "old" parameter Webmin = 1.920. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Webmin passwordchange.cgi RCE CVE-2019-15107 — execute session.""" from future import annotations...

Narcissus - backend.php RCE (CVE-2012-10033)

Exploits CVE-2012-10033 by injecting OS commands into the release parameter of backend.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Narcissus backend.php command injection CVE-2012-10033 — execute session.""" from future import annotations import re from...