CVE-2026-112370

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...

CVE-2026-112370

A vulnerability exists in H3C Magic NX15 100R017 affecting the sub_416874 function within the /usr/bin/usrlist file. This flaw allows for os command injection through specific manipulation, which can be exploited remotely . The documents indicate that an exploit has been made public and is availa...

CVE-2026-112301

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2022-25064

CVE-2022-25064 This script exploits a OS Command Injection vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol...

CVE-2026-112301

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-104602

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-112301

A security flaw exists in orbitale imagemagick-php up to version 3.3.5 . The vulnerability is located in the Command::font function within the src/Command.php file. Improper handling of the fontFile argument allows for remote OS command injection . Public exploits for this vulnerability are avail...

CVE-2026-112301 orbitale imagemagick-php Command.php font os command injection

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview Field| Details ---|--- CVE ID| CVE-2025-69212 Severity| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OS Command Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Function| XML::decodeP7M in...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...

CVE-2026-112195

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112159

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-112195

A flaw in the Dialplan Editor component of FusionPBX (versions up to 5.4.4/5.5.7/5.6.5 ) allows for OS command injection . The vulnerability resides in an unknown function within the file app/dialplans/resources/classes/dialplan.php. An attacker can execute this attack remotely via a manipulation...

EUVD-2026-104483

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

poc-rebar3

Rebar3 shell injection CVE-2020-13802 Proof of concept git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Credit Alexey Pronin @vulnbe References Rebar3 vulnerability analysis Vulnerability remediation PR CVE-2020-13802 CWE-78: Improper Neutralization of Special Element...

CVE-2026-112159

JumpServer versions up to 4.10.19 are vulnerable to an OS command injection vulnerability in the Template Rendering component. The flaw exists in an unknown function where the manipulation of the IP/HOST argument allows for remote exploitation. A public exploit is available. To remediate this, us...

EUVD-2026-104455

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-112159 JumpServer Template Rendering os command injection

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...