TangledWinExec

Tangled WinExec This repository is for investigation of Windows process execution techniques. Most of PoCs are given a name corresponding to the technique. Projects BlockingDLL : This toolset is for testing blocking DLL process. See README.md. CloneProcess : This directory is for process forking...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

diario-commandline-tools

diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...

NagiosXI <= 5.4.12 `commandline.php` SQL injection

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter. id: CVE-2018-10735 info: name: NagiosXI = 5.4.12 commandline.php SQL injection author: DhiyaneshDk severity: high description: | A SQL injection issue was discovered in Nagios XI before...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

net.snowflake:spark-snowflake_2.11 (>=2.5.5-spark_2.2, <=2.5.5-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.5.5-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.10.2)

net.snowflake:snowflake-jdbc MAVEN version 3.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.5.5-spark2.2, =6.1.0, =6.2.1 Source cves: CVE-2026-86597 Source...

com.snowflake:snowpark (1.9.0), io.github.stewartbryson.snowflake:io.github.stewartbryson.snowflake.gradle.plugin (>=2.1.5, <=2.1.11) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.1)

net.snowflake:snowflake-jdbc MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark 1.9.0 -...

net.snowflake:spark-snowflake_2.11 (>=2.5.7-spark_2.2, <=2.5.7-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.5.7-spark_2.4) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.11.1)

net.snowflake:snowflake-jdbc MAVEN version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.5.7-spark2.2, =6.4.1, =6.4.1, =6.2.2, =7.2.0 Source cves:...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.7.0, <=2.9.0), org.apache.nifi:nifi-snowflake-processors (>=1.24.0, <=2.0.0-m1) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.3)

net.snowflake:snowflake-jdbc MAVEN version 3.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.7.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0,...

io.castled:connectors (>=0.1.15-alpha, <=1.0.0), org.flywaydb.enterprise:flyway-commandline (>=7.7.2, <=8.2.0) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.1)

net.snowflake:snowflake-jdbc MAVEN version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.castled:connectors =0.1.15-alpha, =7.7.2, =7.7.2, =9.2.0 - us.fatehi:schemacrawler-distrib 16.14.2 ...

io.smartdatalake:sdl-snowflake_2.11 (>=1.2.4, <=1.3.2), io.smartdatalake:sdl-snowflake_2.12 (>=1.2.4, <=2.1.1) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.17)

net.snowflake:snowflake-jdbc MAVEN version 3.12.17 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.smartdatalake:sdl-snowflake2.11 =1.2.4, =1.2.4, =2.8.4-spark2.3, =2.8.4-spark2.4, =7.5.4, =7.5.4,...

[SECURITY] Fedora 45 Update: freewrl-6.7-5.20240420gitb3254b1.fc45

FreeWRL is an X3D / VRML visualization program. This package contains the standalone commandline tool...

Rocky Linux 8 [CIQ] Security Update: aopalliance / apache-commons-cli / apache-commons-codec / etc (crlsa-2022_4797)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224797 advisory. maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: aopalliance / apache-commons-cli / apache-commons-codec / etc (crlsa-2022_4798)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224798 advisory. maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Tenable has extracted the preceding description block directly from the CIQ security...

com.braimanm:uitaf (>=3.0.0, <=3.2.3), com.braimanm:uitaf-playwright (>=1.0.0-alpha, <=1.0.1-alpha) +5 more potentially affected by CVE-2026-55846 via io.qameta.allure:allure-commandline (>=2.13.8, <=2.36.0)

io.qameta.allure:allure-commandline MAVEN version =2.13.8, =3.0.0, =1.0.0-alpha, =1.1.0, =0.1.17, =0.1.17, =1.0-rc1, =1.1.6 - org.uitaf:uitaf-playwright 1.0.1 Source cves: CVE-2026-55846 Source advisory: MEND:CVE-2026-55846...

Astra Linux – Vulnerability in maven-shared-utils

In Apache Maven’s maven-shared-utils before version 3.3.3, the Commandline class could generate double-quoted strings without proper escaping, allowing for shell injection attacks...

CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection

A security vulnerability has been detected in klaussilveira GitList 2.0.0. Affected by this vulnerability is the function getDefaultBranch of the file src/SCM/System/Git/CommandLine.php of the component Git Command Line. Such manipulation leads to os command injection. The attack can be executed...

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.1-beta-2, <=3.2.1-final) +39 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.1.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ch.inftec.flyway:flyway-extension-commandline =1.3.1-beta-2, =1.3.1-beta-2, =1.0, =2.1....

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.1-beta-2, <=3.2.1-final) +39 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.1.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ch.inftec.flyway:flyway-extension-commandline =1.3.1-beta-2, =1.3.1-beta-2, =1.0, =2.1....