188663 matches found
Exploit for Improper Input Validation in Unrealircd
CVE-2010-2075 — UnrealIRCd 3.2.8.1 Backdoor Exploit !Python...
Exploit for Code Injection in Apache Ofbiz
ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XM...
CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
DEBIAN-CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
CVE-2026-93425
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the user-controlled repoPath value from apps/dokploy/server/api/routers/patch.ts into a shell command in packages/server/src/services/patch-repo.ts without safe...
CVE-2026-79761
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...
UBUNTU-CVE-2026-96745
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...
CVE-2026-23744
CVE-2026-23744 — MCP Connect RCE via Unauthenticated Command Injection ⚠️ Disclaimer: This repository is for educational and security research purposes only. Using this exploit against systems without explicit authorization is illegal. The author is not responsible for any misuse of this code. 📌...
EUVD-2026-86043
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
CVE-2026-97430 xhci: Prevent queuing new commands if xhci is inaccessible
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
CVE-2026-97430 xhci: Prevent queuing new commands if xhci is inaccessible
In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCDFLAGHWACCESSIBLE. HCDFLAGHWACCESSIBLE is set and cleared in suspend and resume...
CVE-2026-97430
The Linux kernel contains a vulnerability where commands could be queued on the command ring even if the xhci controller was marked as inaccessible. The fix ensures the kernel refuses to queue new commands if the HCD_FLAG_HW_ACCESSIBLE flag is not set. Additionally, the kernel now prints a warnin...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
CVE-2026-79766
The web-based server management platform Termix (versions 2.4.1 through 2.5.0) contains an OS command injection vulnerability in its ACME/Let's Encrypt certificate-request handler. An authenticated administrator can supply attacker-controlled domain and email values via PATCH /users/acme-ssl-sett...
EUVD-2026-86161
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...
EUVD-2026-86158
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...
CVE-2026-79761
The web-based server management platform Termix (versions 1.7.0 to 2.5.1 ) is vulnerable to command injection within the SSH key deployment flow. The root cause is located in src/backend/database/routes/credential-deploy-routes.ts, where the application derives a grep pattern from a user-controll...
CVE-2026-79761 Termix: Command injection in SSH key deployment verification
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the Termix SSH key deployment flow derives a grep pattern from a user-controlled public-key token and interpolates it into double-quoted shell commands executed on...