EUVD-2026-69645

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-73782

CVE-2026-73782 is an unauthenticated format string vulnerability in the command line interface of HPE AOS-CX . Successful exploitation allows execution of arbitrary code as a privileged user on the underlying operating system, leading to full compromise of confidentiality, integrity, and availabi...

CVE-2026-73776 Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX

A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...

CVE-2026-73776

CVE-2026-73776 is a signature verification bypass in the command line interface of HPE AOS-CX . An authenticated actor with administrative privileges can exploit it to execute arbitrary code on the underlying operating system, though certain pre-conditions outside the attacker's control must also...

CVE-2026-73768

CVE-2026-73768 is a local privilege escalation in the command line interface (CLI) of HPE ArubaOS-CX (AOS-CX) . The root cause is improper processing of malformed input , which can allow a low-privilege local user to execute arbitrary commands with root privileges . The CVSS 3.1 base score is 7.3...

CVE-2026-73768 Local Privilege Escalation in AOS-CX Command Line Interface

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

CVE-2026-73767

Authenticated command injection vulnerabilities exist in the command line interface (CLI) of HPE AOS-CX (ArubaOS-CX). Successful exploitation allows an attacker with authenticated access to execute arbitrary commands as a privileged user on the underlying operating system. The CNA-assigned CVSS 3...

CVE-2026-73754 Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

EUVD-2026-69618

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

CVE-2026-73754

CVE-2026-73754 affects the command line interface of HPE AOS-CX (ArubaOS CX). The vulnerability allows an authenticated user with low privileges to trigger a denial-of-service , disrupting normal system operation. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high c...

EUVD-2026-69617

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

vulnknox

VulnKnoX VulnKnox is a powerful command-line tool written in Go that interfaces with the KNOXSS API. It automates the process of testing URLs for Cross-Site Scripting XSS vulnerabilities using the advanced capabilities of the KNOXSS engine. Features Supports pipe input for passing file lists and...

hotpot

Hotpot 🍲 命令行版的 Authy / Google Authenticator。 Hotpot 是一个简单安全的命令行工具，用于管理基于 TOTP 的双因素认证码。它安全地将你的 2FA 密钥存储在系统钥匙环中，并在需要时生成基于时间的一次性密码。 采用 Rust 构建，兼具安全性、性能和可靠性。 特性 安全存储 ：使用系统钥匙环（Keychain/libsecret/Credential Manager） TOTP RFC 6238 码生成，支持可自定义算法（SHA1/SHA256/SHA512） 交互式仪表盘 ：实时显示验证码、进度条和模糊搜索 一键复制...

ZipRarHunter

ZipRarHunter ZipRarHunter 是一款功能强大的命令行道德黑客工具，旨在使用字典破解 ZIP 和 RAR 存档文件的密码。它自动化了从加密存档中恢复密码的过程。 功能 破解使用 ZipCrypto 和 AES-256 加密的 ZIP 文件 使用多线程暴力破解攻击破解 RAR4 存档 （如果安装了付费版本的 UnRAR，也支持 RAR5） 使用 --threads 参数（线程模式，默认值：4）或 --cores 参数（进程模式，默认值：使用所有 CPU 核心）提高破解速度。 通过逐行读取字典（流式读取）实现高效内存使用 自动检测 ZIP 加密方法 支持编码回退（UTF-...

Strutshock

Strutshock 用法 strutshock http://example.com/index.action...

CmdLineSpoofer

命令行欺骗器 这是一个使用 C 注入 meterpreter shell 并同时欺骗命令行的示例。命令行存储在进程环境块（PEB）中，在新进程启动时会被记录，并在诸如 Process Hacker 和任务管理器等工具中显示。 简介 此代码基于 Adam Chester/XPN 的博客 如何像 Cobalt Strike 一样争论，该博客解释了 Cobalt Strike 在注入 beacon 时如何欺骗进程的命令行。 我以此为基础创建了一个 C 版本，它生成一个 PowerShell 进程并注入 meterpreter 反向 shell。诚然，无需 .Net...

CVE-2026-32722

CVE-2026-32722 Bloomberg Memray 通过未转义的命令行元数据实现存储型 XSS 简介 我在审查 Memray （Bloomberg 的 Python 内存分析器）时发现了这个问题，脑海中带着一个简单的问题： 攻击者控制的运行时元数据能否不安全地进入浏览器渲染的报告输出？ 在这个案例中，答案是肯定的。 该缺陷存在于 Memray 的 HTML 报告生成路径中，命令行元数据在未经转义的情况下被渲染到浏览器打开的报告里。这将一个操作字段变成了可执行的 HTML 汇点，最终成为 CVE-2026-32722 。 项目： GitHub 上的 Memray 公告：...

CVE-2014-0160-Scanner

CVE-2014-0160-Scanner 这是一个简单的 PHP 命令行脚本，用于检查一组域名是否存在 CVE-2014-0160 漏洞 运行方式： php index.php 致谢： 该脚本使用了 http://filippo.io/Heartbleed/ 提供的服务...

CVE-2021-44906

CVE-2021-44906 Originalmente de: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip Ejecución root@kitploit: npm run hack Y verás que la propiedad done de cualquier función se cambia a true. La explicación de la línea de comando node index.js...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...