CVE-2022-1388

CVE-2022-1388 POC para CVE-2022-1388 que afecta a múltiples productos F5. Sigue al equipo de ataque de Horizon3.ai en Twitter para conocer las últimas investigaciones de seguridad: Horizon3 Attack Team James Horseman Zach Hanley Análisis técnico Un análisis técnico de la causa raíz de la...

CVE-2026-34990

CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...

CVE-2022-22954

Detección de múltiples puntos de activación de vulnerabilidades, detección por lotes multiproceso, ejecución de comandos, escritura de archivos // 单个目标漏洞检测 python CVE-2022-22954.py -u https://x.x.x.x // 命令执行 python CVE-2022-22954.py -u https://x.x.x.x -c "id" // 写文件 python CVE-2022-22954.py -u...

Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

PuttyRider

PuttyRider Secuestrar sesiones de Putty para espiar la conversación e inyectar comandos de Linux. Descarga PuttyRider-bin.zip Documentación Presentación de Defcamp 2014 - pdf Presentación de Defcamp 2014 - vídeo Ejemplos Listar los procesos Putty existentes y su estado inyectado / no inyectado...

CVE-2026-51870

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CVE-2026-102136

In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...

CVE-2026-102133

An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in a user-supplied path before passing it to an external command. An authenticated system administrator could inject additional commands and write arbitrary content to files owned...

CVE-2026-102114

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

CVE-2026-102096

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not sufficiently validated before being processed. A crafted package could cause the underlying system to execute arbitrary...

CVE-2026-102099

Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied file path in a Kiteworks administrative export feature could allow an authenticated administrator to write a file to an arbitrary location on the underlying host, potentially...

CVE-2022-26134

CVE-2022-26134 -u URL, --url URL URL objetivo -c COMMAND, --command COMMAND Comando -i LHOST, --lhost LHOST Dirección del host de rebote -p LPORT, --lport LPORT Puerto del host de rebote -f FILE, --file FILE Escaneo por lotes...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool Acerca de Este script intentará crear un documento de Microsoft Office que ejecutará código de forma remota. Configuración git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Opcione...

CVE-2024-8190-unauth

CVE-2024-8190 no autenticado Descripción Combinando CVE-2024-8963 & CVE-2024-8190 - PoC para RCE no autenticado en Ivanti CSA 4.6 y anteriores. CVE-2024-8963 Path Traversal en Ivanti CSA anterior al parche 519 de la versión 4.6 permite a un atacante remoto no autenticado acceder a funcionalidades...

loader-CVE-2020-14343

loader-CVE-2020-14343 Una aplicación web vulnerable a la deserialización insegura CVE-2020-14343 que conduce a la ejecución de comandos en el paquete PyYAML. Informe: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CVE-2019-15107-Scanner

Escáner de Vulnerabilidad Webmin CVE-2019-15107 Un escáner Python multi-hilo para detectar servidores Webmin vulnerables a CVE-2019-15107 vulnerabilidad de ejecución remota de código autenticada en versiones de Webmin 1.890 a 1.920. Descripción Esta herramienta escanea una lista de servidores...

Shelly

Shelly | Gestor de Backdoors Simple con Python basado en weevely Shelly es una herramienta simple escrita en Python, que sirve para acceder remotamente a un sitio web Instalación : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requisitos : sudo pip install -r...

rustcat

rustcat - The modern port listener and reverse shell What is Rustcat Rustcat is an easy to use port listener and reverse shell for Linux, MacOS, and Windows aimed to be easy to use and accessible. Modes Listen mode listen; Reverse shell mode connect; Features Command history & Tab completion...