aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

NagiosXI <= 5.4.12 `commandline.php` SQL injection

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter. id: CVE-2018-10735 info: name: NagiosXI = 5.4.12 commandline.php SQL injection author: DhiyaneshDk severity: high description: | A SQL injection issue was discovered in Nagios XI before...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

TangledWinExec

Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. Projects BlockingDLL : This toolset is for testing blocking DLL process. See README.md. CloneProcess : This directory is for process forking...

diario-commandline-tools

diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...

SmarterMail Antivirus Command-Line Configuration RCE (SYSTEM)

Sysadmin JWT: upload pocrce.bat, set antivirus commandLine, trigger scan via SMTP EICAR message. """SmarterMail sysadmin antivirus commandLine BAT upload → SYSTEM RCE via SMTP scan.""" from future import annotations import base64 import json import socket import time from kittysploit import from...

[SECURITY] Fedora 45 Update: freewrl-6.7-5.20240420gitb3254b1.fc45

FreeWRL is an X3D / VRML visualization program. This package contains the standalone commandline tool...

Rocky Linux 8 [CIQ] Security Update: aopalliance / apache-commons-cli / apache-commons-codec / etc (crlsa-2022_4798)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224798 advisory. maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: aopalliance / apache-commons-cli / apache-commons-codec / etc (crlsa-2022_4797)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224797 advisory. maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Tenable has extracted the preceding description block directly from the CIQ security...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: MEND:CVE-2026-55846...

Astra Linux – Vulnerability in maven-shared-utils

In Apache Maven’s maven-shared-utils before version 3.3.3, the Commandline class could generate double-quoted strings without proper escaping, allowing for shell injection attacks...

CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

AWS CLI: Overly permissive File Permissions

SummaryThe AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host ...

EUVD-2026-44910

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +7 more potentially affected by CVE-2026-55847 via io.qameta.allure:allure-generator (>=2.8.0, <=2.38.1)

io.qameta.allure:allure-generator MAVEN version =2.8.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =2.8.0, =2.38.1 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55847 Source advisory: GHSA-GX93-M64W-5M6H...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +7 more potentially affected by CVE-2026-55847 via io.qameta.allure:allure-generator (>=2.8.0, <=2.38.1)

io.qameta.allure:allure-generator MAVEN version =2.8.0, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =2.8.0, =2.38.1 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55847 Source advisory: OSV:GHSA-GX93-M64W-5M6H...

Allure Report: Path Traversal in HTTP Server Allows Arbitrary File Read

Summary The built-in HTTP server started by allure serve and allure open is vulnerable to path traversal. The server resolves request URI paths directly against the report directory without normalizing or validating that the resolved path stays within the report directory. An attacker who can rea...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: GHSA-82CG-3HV7-74GC...