CVE-2022-1292

CVE-2022-1292 POC Descripción root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

Viessmann Vitogate 300 - Remote Code Execution

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method. id: CVE-2023-45852 info: name: Viessmann Vitogate 300 - Remote Code Execution autho...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

Websvn <2.6.1 - Remote Code Execution

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. id: CVE-2021-32305 info: name: Websvn 2.6.1 - Remote Code Execution author: gy741 severity: critical description: WebSVN before 2.6.1 allows remote attackers to execute...

CVE-2007-2447

CVE-2007-2447 - script de mapa de usuario "La funcionalidad MS-RPC en smbd de Samba 3.0.0 hasta 3.0.25rc3 permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaracteres de shell que involucran la función 1 SamrChangePassword, cuando la opción "username map script" de smb.conf...

CVE-2019-19781

CVE-2019-19781 Solo un exploit en python3 para CVE-2019-19781 para Citrix detrás de una caché. Esta versión acepta '', '|', '2&1'... etc. USO python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Por hacer Repetir si el encabezado Age está en la respuesta. Modo continuo -c. Modo de...

CVE-2024-37770

CVE-2024-37770 descripción Se descubrió que 14Finger v1.1 contiene una vulnerabilidad de ejecución remota de comandos RCE en la función fingerprint. Esta vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios a través de un payload manipulado. Vector de ataque Atacantes no...

CVE-2024-51567

Script de Explotación CVE-2024-51567 CVE-2024-51567 es un script de explotación de prueba de concepto PoC en Python para CVE-2024-51567 , una vulnerabilidad crítica de inyección de comandos que afecta a CyberPanel v2.3.6. Esta vulnerabilidad, encontrada en el endpoint upgrademysqlstatus, permite ...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Inyección de Comandos en el Nombre del Trabajo de Impresión de Samba Resumen CVE-2026-4480 es una vulnerabilidad de inyección de comandos que afecta a ciertas configuraciones de impresión de Samba que utilizan comandos de impresión externos. La vulnerabilidad...

CVE-2020-35713

Descripción Los dispositivos Belkin LINKSYS RE6500 anteriores a la versión 1.0.012.001 permiten a atacantes remotos ejecutar comandos arbitrarios o establecer una nueva contraseña mediante metacaracteres de shell en la página goform/setSysAdm. Cómo usar Paso 1: Modificar la dirección IP en el...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-16348

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...