CVE-2026-12405

A flaw was found in rubygem-foremanremoteexecution. A command injection vulnerability exists in the Red Hat Satellite API /api/v2/jobinvocations. When a job template has the effectiveuser property marked as overridable: true, the application fails to properly sanitize the effectiveuser input...

CVE-2026-24061

CVE-2026-24061 Herramienta de escaneo por lotes CVE-2026-24061 Cómo usar options: -h, --help show this help message and exit -t, --target TARGET Target IP/CIDR or comma-separated list repeatable -f, --file FILE File with targets IP/CIDR, one per line or comma-separated -p, --port PORT Target port...

LongBow

Exploit de ejecución remota de comandos local en el router Archer TP-Link VR1600V CVE-2023-31756 Descripción general Este script en Python demuestra una vulnerabilidad de ejecución remota de comandos local en los routers Archer TP-Link VR1600V V1/V2. El exploit permite obtener acceso administrati...

CVE-2026-16348

TP-Link Archer BE800 V1 — RCE autenticado mediante inyección de clave VPN CVE: CVE-2026-16348 CVSS: 8.5 Alta — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Autenticación requerida: Credenciales de administrador válidas Posición en la red: Red remota si la interfaz de gestión es...

CVE-2026-0709

Hikvision Wireless AP – CVE-2026-0709 Authenticated RCE Tool This tool is a Python proof‑of‑concept to test Hikvision wireless access points for CVE‑2026‑0709 , an authenticated command injection vulnerability that can lead to remote code execution on affected devices. For security testing and...

EUVD-2026-90968

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12542

A flaw was found in Foreman where the foreman-tail utility is vulnerable to OS command injection . The vulnerability stems from the unsafe use of the eval command, which incorporates unsanitized and unquoted user-supplied arguments into a string to expand file paths. A local attacker can exploit ...

EUVD-2026-90969

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2026-12545 Rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12542 Foreman: command injection in foreman-tail

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2026-12545

A command injection vulnerability exists in rubygem-hammer_cli , affecting the Hammer CLI and the Railties (Ruby on Rails) component distributed with Red Hat Satellite . The flaw is caused by the insecure interpolation of the $EDITOR environment variable into the Ruby system() method. Because the...

CVE-2026-12545 Rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12542

A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not...

CVE-2023-22527

CVE-2023-22527 Vulnerabilidad de ejecución remota de código en Atlassian Confluence CVE-2023-22527 options: -h, --help show this help message and exit -u URL, --url URL Target URL; Example: python .py -u http://ip:port -f FILE, --file FILE Target urllist; Example: python .py -f urllist.txt -c CMD...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 es una ejecución remota de código en GitHub.com y GitHub Enterprise Server La vulnerabilidad podría explotarse inyectando comandos en el comando git push de la siguiente manera: git push -o '' origin master Para revisar cualquier explotación de esta...

CVE-2021-44228

CVE-2021-44228 Ejecución remota de comandos RCE en el componente Log4j2 Code By:Junsheng @Laboratorio de Seguridad Cibernética Naranja Laboratorio de Seguridad Cibernética Naranja https://0range.team/ 0x00 Resumen de riesgos Esta herramienta está destinada únicamente a pruebas de seguridad...

cve-2024-51567-poc

cve-2024-51567-poc Descripción simplificada Resumen de la vulnerabilidad Identificador : CVE-2024-51567 Tipo : Inyección de comandos / Bypass de CSRF Alcance : CyberPanel versiones 2.3.6 y 2.3.7 sin parche Descripción : En el endpoint upgrademysqlstatus de CyberPanel, al eludir la protección de...

CVE-2026-33439-PoC

CVE-2026-33439 — RCE Pre-Auth en OpenAM Modo Echo Salida de comandos directamente en la respuesta HTTP — sin exfiltración por DNS ni OOB. Utiliza com.iplanet.jato.RequestManager.getRequestContext para acceder a la solicitud/respuesta activa de JATO ThreadLocal durante la deserialización. Funciona...

CVE-2021-42237

CVE-2021-42237 Este es un exploit/PoC para CVE-2021-42237 tomado de: Este informe de Assetnote DESCARGO DE RESPONSABILIDAD: No estoy asociado con Assetnote de ninguna manera. Este contenido se proporciona únicamente con fines educativos. Asegúrate de reemplazar CMD-COMMAND-HERE, así como el Host,...