cve-2020-11651-exp-plus

Verwendung von bash zur Ausführung des --exec Parameters. Das ursprüngliche Skript verwendete /bin/sh, daher waren einige Befehle nicht kompatibel, z.B. Bash-Reverse-Shell. 2. Der ursprüngliche Code holte die lokale Salt-Master-Version, um zu prüfen, ob entfernte Hosts betroffen waren – ein...

PT-2026-81927

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2019-5736

Verwendung Bearbeite HOST in payload.c, kompiliere mit make. Starte nc und führe pwn.sh innerhalb des Containers aus. Hinweise Dieser Exploit ist zerstörerisch: Er überschreibt die Binärdatei /usr/bin/docker-runc auf dem Host mit dem Payload. Außerdem überschreibt er /bin/sh innerhalb des...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler that allows an OS command injection. A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS v3.1 base score is 6.8 (MEDIUM) with a vector of AV:N/AC:H/PR:L/UI:N/S:U/...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

EUVD-2026-66104

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

procrustes

Procrustes Uno script bash che automatizza l'esfiltrazione di dati tramite DNS nel caso in cui abbiamo un'esecuzione cieca di comandi su un server dove tutte le connessioni in uscita tranne il DNS sono bloccate. Lo script attualmente supporta sh, bash e PowerShell ed è compatibile con l'esecuzion...

Jatayu

JATAYU Web Shell PHP Autonomo e Furtivo CARATTERISTICHE Autenticazione basata su header HTTP. 100% Non Rilevabile. Cambio della funzione exec. Niente di speciale. UTILIZZO...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC प्रमाणित PoC डेमो उपयोग अप्रमाणित PoC डेमो उपयोग प्रमाणित PoC CVE-2018-1002105 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट। वर्तमान एक्सप्लॉइट को pods और pods/exec पर create और get विशेषाधिकारों की आवश्यकता होती है। portforward और attach के लिए समर्थन जोड़ा गया है, जिन्हें समान...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Hintergrund pfBlockerNG ist die nächste Generation von pfBlocker mit den folgenden Funktionen: 1. Verwalten Sie IPv4/v6-Listenquellen in 'Verweigern, Zulassen oder Übereinstimmen' Formaten. 2. GeoIP-Datenbank von MaxMind Inc. GeoLite2 Free version. 3. Deduplizierung,...

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 e CVE-2025-29891 são vulnerabilidades no Apache Camel que afetam as versões: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. A exploração dessas vulnerabilidades pode permitir que atacantes executem métodos internos do Camel. A seguir est...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Sitecore Experience Platform Pre-Auth RCE

Sitecore XP 7.5 to Sitecore XP 8.2 Update 7 is vulnerable to an insecure deserialization attack where remote commands can be executed by an attacker with no authentication or special configuration required. id: CVE-2021-42237 info: name: Sitecore Experience Platform Pre-Auth RCE author: pdteam...

mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — RCE non autenticata in MindsDB Minds Platform / MindsHub Cowork PoC per CVE-2026-73678 CVSS 3.1 10.0 Critico , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Analisi completa: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ Il sidecar FastA...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux-Kernel-posix-cpu-timers-Nicht-Leader-exec-Race-UAF Reproducer / PoC Trigger-Verifikation : Linux & Android NDK Dieses Repository dient ausschließlich der Verifikation des Patch-Status auf eigenen Testgeräten sowie zu Studienzwecken; es enthält keinerlei...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE भेद्यता कारण विश्लेषण 1. कोड सुरक्षा जाँच का अभाव समस्या: सिस्टम उपयोगकर्ता द्वारा प्रदान किए गए स्रोत कोड पर कोई सुरक्षा जाँच नहीं करता है। साक्ष्य: generateexecutionscript विधि सीधे उपयोगकर्ता कोड को निष्पादन स्क्रिप्ट में सम्मिलित करती है: python code += "\n" +...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...