CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Modelo-de-Amenazas----ms-agent-Inyección-de-Comandos...

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Generador de Artefactos de Detección para Dell UnityVSA CVE-2025-36604 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 Consulte nuestra publicación del blog para obtener detalles técnicos Detección en Acción python...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 Se encontró una vulnerabilidad crítica de inyección de comandos en múltiples endpoints de API de Atlassian Bitbucket Server y Data Center. Esta vulnerabilidad afecta a todas las versiones de Bitbucket Server y Data Center lanzadas antes de las versiones &...

K000163537: Vim vulnerability CVE-2026-73073

Security Advisory Description Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated...

Termix-research

Investigación de seguridad de Termix Investigación de vulnerabilidades en Termix, una plataforma web de gestión de SSH y servidores más de 13k estrellas. CVE| Problema| Severidad| Corregido| Aviso ---|---|---|---|--- CVE-2026-45746| Secuestro de sesión → RCE| 9.0 Crítica| v2.3.2|...

CVE-2022-31499

CVE-2022-31499 Título del exploit: Nortek Linear eMerge E3-Series - Inyección ciega de comandos del sistema operativo...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

Cacti <=1.2.22 - Remote Command Injection

Cacti through 1.2.22 is susceptible to remote command injection. There is insufficient authorization within the remote agent when handling HTTP requests with a custom Forwarded-For HTTP header. An attacker can send a specially crafted HTTP request to the affected instance and execute arbitrary OS...

CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ Se descubrió un problema en Webmin =1.920. Los parámetros "old" y "expire" en passwordchange.cgi contienen una vulnerabilidad de inyección de comandos. Uso 1. Inicia un listener en la caja roja. rlwrap -cAr nc -lvp 1919 2. Ejecuta el...

CVE-2022-46169_poc

CVE-2022-46169 ejecución remota de código no autenticada Descripción Omisión de autenticación: la comprobación de autorización basada en el nombre de host no se implementa de forma segura para la mayoría de las instalaciones de Cacti Inyección de comandos: la entrada del usuario sin sanitizar se...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC de Triple RCE en GL.iNet Beryl AX PoC para tres vulnerabilidades de inyección de comandos sin autenticación CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 en el firmware del router de viaje GL.iNet GL-MT3000 Beryl AX = 4.4.5. Artículo completo:...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Inyección de Comandos Autenticada CVE-2026-46368 Este repositorio contiene el PoC Prueba de Concepto para una vulnerabilidad crítica de inyección de comandos del sistema operativo en luci-app-https-dns-proxy que resulta en la ejecución arbitraria de comandos como...

K000163534: Ruby vulnerabilities CVE-2026-42245, CVE-2026-42246, CVE-2026-42257

Security Advisory Description CVE-2026-42245 Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. ...

VulnCheck KEV: CVE-2024-23625

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

PT-2026-106219

Name of the Vulnerable Software and Affected Versions Chainguard Academy edu integrate-platform-docs composite GitHub Action versions from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff through commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 Description Improper neutralization of special element...

Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

CVE-2026-105767: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105691: Improper Neutralization of Special Elements used in an OS Command

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...

Cisco ASA OS Command Injection (CVE-2020-3167)

A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabilit...