CVE-2019-19609

Strapi CMS Exploit Dieser Exploit zielt auf zwei Schwachstellen im Strapi CMS Framework Version 3.0.0-beta-17.4 ab, die eine nicht authentifizierte Remotecodeausführung RCE ermöglichen. Schwachstellen CVE-2019-18818 Schwacher Mechanismus zur Wiederherstellung vergessener Passwörter CVSS : 9.8 -...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Modulo Metasploit Modulo Metasploit per InfoBlox Network Automation: iniezione di comandi del sistema operativo Prodotto: Network Automation root@kitploit: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Fornitore: root@kitploit: InfoBlox...

CVE-2026-75122

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote...

CVE-2026-75121

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The webvlanmembershipeditdialogpost handler incorporates the memberTags POST parameter into a shell command without sanitization. A remote authenticated...

CVE-2026-75123

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

Zimbra-CVE-2026-73570-Rules

Wazuh-Regeln CVE-2026-73570 Zimbra OS Command Injection Erkennungsregeln für CVE-2026-73570 , eine OS-Command-Injection in der Zimbra Collaboration Suite über den SNMP-Trap-Benachrichtigungsparameter snmpnotify. Schwachstelle...

CVE-2025-61304

CVE-2025-61304 "1.016 तक के Dynatrace ActiveGate ping एक्सटेंशन में विशेष रूप से निर्मित IP पते के माध्यम से OS कमांड इंजेक्शन भेद्यता" पृष्ठभूमि में ping एक्सटेंशन ping करने के लिए Windows के कमांड प्रॉम्प्ट का उपयोग कर रहा है। Test Target Host के लिए इनपुट फ़ील्ड 1024 वर्ण लंबा भी है। IP पते के...

CVE-2026-37751

An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...

CVE-2026-26833

CVE-2026-26833: Iniezione di comandi del sistema operativo in thumbler Riepilogo thumbler fino alla versione 1.1.2 consente l'iniezione di comandi del sistema operativo in thumbnail in lib/thumbler.js. Il pacchetto concatena i valori input, output, time e size in un'unica stringa di comando ffmpe...

CVE-2026-26832

CVE-2026-26832: Iniezione di comandi del sistema operativo in node-tesseract-ocr Riepilogo node-tesseract-ocr fino alla versione 2.2.1 consente l'iniezione di comandi del sistema operativo in recognize in src/index.js. Il pacchetto costruisce una stringa di comando shell e la esegue con...

CVE-2026-26831

CVE-2026-26831: iniezione di comandi del sistema operativo in textract Riepilogo textract fino alla versione 2.5.0 consente l'iniezione di comandi del sistema operativo tramite il percorso del file fornito a molteplici estrattori. Diversi percorsi di codice passano quel percorso del file a...

CVE-2026-26830

CVE-2026-26830: Injeção de comandos do sistema operacional em pdf-image Resumo pdf-image até a versão 2.0.0 permite injeção de comandos do sistema operacional por meio do argumento pdfFilePath. O pacote constrói strings de comando shell com util.format e as executa com childprocess.exec. Se uma...

CVE-2026-23500

CVE-2026-23500: Iniezione di comandi di sistema RCE tramite la configurazione MAINODTASPDF in Dolibarr Panoramica...

EUVD-2026-67783

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...

EUVD-2026-67782

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote...

CVE-2026-75121

PLANET GS-4210-16P2S managed switches with firmware prior to 3.441b260626 are affected by an authenticated OS command injection in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_post handler incorporates the memberTags POST parameter directly into a shell command without sanitizatio...

EUVD-2026-67781

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The webvlanmembershipeditdialogpost handler incorporates the memberTags POST parameter into a shell command without sanitization. A remote authenticated...

CVE-2025-11953-PoC

الوصف خادم التطوير Metro، الذي يفتحه واجهة أوامر React Native Community CLI، يرتبط بالواجهات الخارجية افتراضيًا. يعرّض الخادم نقطة نهاية معرضة لحقن أوامر نظام التشغيل. وهذا يسمح لمهاجمي الشبكة غير المصادق عليهم بإرسال طلب POST إلى الخادم وتشغيل ملفات تنفيذية عشوائية. على نظام Windows، يمكن...

cve-2017-5123

CVE-2017-5123 Questa repository contiene una dimostrazione di CVE-2017-5123 , un backdoor di comando e controllo via ICMP, e un'applicazione web vulnerabile CWE-78 OS Command Injection. Parte di CSC 4308 - Challenge 3. Prerequisiti Linux Kernel : dalla 4.13 fino alla ma esclusa 4.13.7 Node.js :...

Ashwesker-CVE-2025-64155

🔒 CVE-2025-64155: Kritische FortiSIEM-Sicherheitslücke 📌 Übersicht CVE-2025-64155 ist eine kritische Sicherheitslücke in Fortinet FortiSIEM , einer beliebten Plattform für Security Information and Event Management SIEM. Die am 13. Januar 2026 öffentlich bekannt gegebene Schwachstelle ermöglicht e...