shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

Impact quote emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator in that later string ends the comment, and the rest of the string is parsed as shell input: js quote'echo', 'ok',...

GHSA-PQG4-J6R4-53MV shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

Impact quote emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator in that later string ends the comment, and the rest of the string is parsed as shell input: js quote'echo', 'ok',...

CVE-2026-5229

CVE-2026-5229 CVE-2026-5229: Bypass de Autenticación de Form Notify a través de la devolución de llamada de OAuth de LINE CVSS 9.8 Form Notify — Escáner de Bypass de Autenticación de LINE OAuth Plugin: Form Notify form-notify Tipo de vulnerabilidad: Bypass de Autenticación de LINE OAuth no...

Preproduce-CVE-2019-0232

CVE-2019-0232 - Ejecución Remota de Código en Apache Tomcat CGI Servlet Este repositorio proporciona un entorno de laboratorio basado en Docker para reproducir la vulnerabilidad CVE-2019-0232 en Apache Tomcat 9.0.17 en Windows. Resumen de la Vulnerabilidad CVE-2019-0232 es una vulnerabilidad de...

CLEANSTART-2026-FP29744 Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`

Security vulnerability affects the sonarqube package. Netty allows request-line validation to be bypassed when a DefaultHttpRequest or DefaultFullHttpRequest is created first and its URI is later changed via setUri...

PT-2026-107199

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An authenticated path traversal vulnerability exists in the command line interface. This flaw allows a low-privileged authenticated remote attacker to execute arbitrary code...

SUSE SLES16: glib2-devel / glib2-devel-static / glib2-doc / glib2-lang / etc (SUSE-SU-2026:23980-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23980-1 advisory. This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering...

Privilege escalation vulnerability exists in the internal Command-Line Interface of Fabric OS (CVE-2026-94577)

: A privilege escalation vulnerability exists in the internal Command-Line Interface CLI authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the process execution environment can bypas...

PwnedCheck

PwnedCheck PwnedCheck es una herramienta de línea de comandos para verificar si las contraseñas han aparecido en filtraciones de datos conocidas utilizando la API deHave I Been Pwned y admite exportaciones cifradas de bóvedas de Bitwarden. Características Verificar contraseñas individuales desde ...

CVE-2025-55182-advanced-scanner-

Escáner CVE-2025-55182 Herramienta de línea de comandos simple para detectar y explotar CVE-2025-55182 RCE de Componentes del Servidor React en aplicaciones Next.js. Instalación chmod +x scanner.sh Uso Scan with default command id ./scanner.sh -d example.com Execute custom command ./scanner.sh -d...

CVE-2025-9491_POC

CVE-2025-9491 PoC de Ofuscación LNK Una herramienta de prueba de concepto para demostrar la vulnerabilidad de los archivos de acceso directo LNK de Windows ZDI-CAN-25373/CVE-2025-9491. Esta herramienta muestra cómo se pueden ocultar argumentos de línea de comandos maliciosos dentro de archivos .l...

CVE-2002-0740

CVE-2002-0740 SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability Packetstorm publication at https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Securiteam publication at http://www.securiteam.com/unixfocus/5FP0R0K6UC.html Securityfocus publication at...

CVE-2000-0114

CVE-2000-0114 This a CVE I found it in VDP at hackerone Platform Steps to POC :- 1 - install " pip install CVE-2000-0114 " 2 - run " CVE-2000-0114 -u https://example.com " 3 - or you can run script...

clif

clif clif es un fuzzer de aplicaciones de interfaz de línea de comandos CLI, muy parecido a lo que wfuzz o ffuf son para la web. Fue inspirado por la vulnerabilidad CVE-2021-3156 de sudo y el hecho de que, por algunas razones, afl-fuzz de Google no permite la especificación ilimitada de argumento...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar ofrece la verificación de la vulnerabilidad en modo de línea de comandos; si la vulnerabilidad existe, devuelve la cadena de caracteres característica. Solo necesita ejecutar el comando: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回:...

Astra Linux – Vulnerability in exim4

A use-after-free exists in Exim 4.96 through 4.98.1, which could allow users with command-line access to escalate their privileges...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: um: line: always fill errorout in setuponeline The pointer is not initialized by the callers, but I’ve encountered cases where it is still printed; initialize it in all possible cases within setuponeline...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. The redis-cli command-line tool and the redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This issue arises due to a vulnerability in the hiredis...

Astra Linux – Vulnerability in Golang-1.19

The “//line” directive can be used to bypass the restrictions on the “//go:cgo” directives, allowing for the passing of blocked linker and compiler flags during compilation. This can lead to the execution of arbitrary code when running “go build”. The “//line” directive requires the absolute path...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: sca3000: Fixed a resource leak in sca3000probe The variable spi-irq is not released after the requestthreadedirq function is called, when iiodeviceregister fails. Added a return value check and a jump to a common error handl...