CVE-2025-15545

CVE-2025-15545 정보 공급업체: TP-Link 공급업체 웹사이트: TP-Link 모델: Archer RE605X 하드웨어 버전: RE605X v3.0 펌웨어 버전: RE605XEUV31.1.5 Build 20240905 펌웨어 다운로드 주소: TP-Link 하드코딩된 암호화 키 사용 및 XML 구성 파서 구성 요소의 명령 주입을 포함한 일련의 취약점으로 인해 로컬 인증 공격자가 장치에서 루트 권한으로 원격 코드 실행RCE을 달성할 수 있습니다. PoC 요구사항 참고: exploit.py 개념 증명은 연결된 공격...

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP 서버 버퍼 오버플로 익스플로잇 📌 개요 이 저장소는 FreeFloat FTP Server 애플리케이션에서 발견된 스택 기반 버퍼 오버플로 취약점 의 발견 및 익스플로잇 과정을 기록합니다. 이 취약점은 USER 명령어 처리 과정에 존재하며, 안전하지 않은 메모리 연산strcpy으로 인해 공격자가 스택을 덮어쓰고 실행 흐름을 제어할 수 있게 됩니다. 이 프로젝트는 리버스 엔지니어링부터 임의 코드 실행까지의 완전한 익스플로잇 워크플로우를 보여줍니다. 🎯 취약점 세부 정보 대상...

CVE-2026-26832

CVE-2026-26832: node-tesseract-ocr의 OS 명령 주입 요약 node-tesseract-ocr 버전 2.2.1까지는 src/index.js의 recognize에서 OS 명령 주입이 가능합니다. 이 패키지는 셸 명령 문자열을 구성한 뒤 childprocess.exec로 실행합니다. 입력 경로가 큰따옴표로만 감싸여 있기 때문에, 공격자는 조작된 파일 경로를 통해 셸 구문을 주입할 수 있습니다. 영향받는 제품 제품| 영향받는 버전| 수정 버전 ---|---|--- node-tesseract-ocr|...

CVE-2026-105050: Incorrect Behavior Order: Validate Before Canonicalize

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-104019: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-51911

The vanna library version v2.0.2 is affected by a code injection vulnerability (CWE-94) located in the VannaBase.get_plotly_figure function within the file src/vanna/legacy/base/base.py. Due to this flaw, an attacker can trigger attacker-controlled code or command execution depending on the expos...

EUVD-2026-91754

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51911: Undefined Security Weakness

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51911

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

PT-2026-104453

Name of the Vulnerable Software and Affected Versions PeaZip versions prior to 11.3.0 Description In a non-default configuration, the software is susceptible to OS command injection. This occurs when a filename within an archive is processed and the application mishandles cases where a quotation...

PT-2026-104443

Name of the Vulnerable Software and Affected Versions UTMStack versions prior to 11.2.16 Description An authorization flaw exists in the UTMIncidentCommandWebsocket.processCommand function, which handles the '/command/hostname' STOMP destination. The system fails to perform role checks or apply a...

Rocky Linux 8 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource Multiple Vulnerabilities (crlsa-2026_74095)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674095 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: Arbitrary file deletion via malicious file lis...

MiracleLinux 8 : rsync-3.1.3-28.el8_10 (AXSA:2026-1954:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1954:09 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: Arbitrary file deletion via malicious fi...

CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

PT-2026-104209

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

PT-2026-104442

Name of the Vulnerable Software and Affected Versions Digi DAL OS affected versions not specified Description An OS Command Injection flaw exists in the web administration interface. An unauthenticated attacker can send a specially crafted HTTP POST request to execute arbitrary operating system...

PT-2026-104355

Name of the Vulnerable Software and Affected Versions GitLab AI Gateway versions 18.1.6 through 19.2.3 GitLab AI Gateway versions 19.3 through 19.3.1 GitLab AI Gateway versions 19.4 through 19.4.0 Description An improper neutralization weakness in the GitLab AI Gateway allows an authenticated use...

CVE-2026-75937: Improper Neutralization of Special Elements used in an OS Command

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...

PT-2026-104430

Name of the Vulnerable Software and Affected Versions Amazon SageMaker Distribution versions prior to 2.14.12 Amazon SageMaker Distribution versions prior to 3.9.12 Amazon SageMaker Distribution versions prior to 4.0.11 Amazon SageMaker Distribution versions prior to 4.1.11 Amazon SageMaker...

ROS-20261002-73-0006

The vulnerability of the psql utility in the PostgreSQL database management system lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...