Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

16545 matches found

Kitploit
Kitploit•added 2026/09/29 6:45 p.m.•12 views

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS 명령 주입 Exploit 제목: SDT-CW3B1 1.1.0 - OS 명령 주입 공급업체 홈페이지: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE 설명: Telesquare SDT-CW3B1 1.1.0은 OS 명령 주입 취약점의 영향을 받으며, 원격 공격자가 인증 없이 OS 명령을 실행할 수 있습니다. 인증 필요: 아니요...

10CVSS8.5AI score0.94342EPSS
SaveExploits21
NVD
NVD•added 2026/09/29 5:17 p.m.•5 views

CVE-2022-51019

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

8.8CVSS0.01799EPSS
SaveExploits0References6
OSV
OSV•added 2026/09/29 4:04 p.m.•4 views

CVE-2022-51019 Akaunting before 2.1.31 OS Command Injection via app alias

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

8.7CVSS6.4AI score
SaveExploits0References8
Cvelist
Cvelist•added 2026/09/29 4:04 p.m.•33 views

CVE-2022-51019 Akaunting before 2.1.31 OS Command Injection via app alias

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

8.8CVSS0.01799EPSS
SaveExploits0References6
CVE
CVE•added 2026/09/29 4:04 p.m.•11 views

CVE-2022-51019

Akaunting versions prior to 2.1.31 are vulnerable to an OS command injection vulnerability within the module installation and update flow. The root cause is the unvalidated passing of the alias parameter to shell command execution. Authenticated users with admin panel access can exploit this by i...

8.8CVSS6.7AI score0.01799EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/09/29 4:04 p.m.•4 views

CVE-2022-51019 Akaunting before 2.1.31 OS Command Injection via app alias

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

8.8CVSS6.7AI score0.01799EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/09/29 4:04 p.m.•7 views

EUVD-2022-56062

Akaunting before 2.1.31 contains an OS command injection vulnerability in the module installation and update flow where the alias parameter is passed unvalidated to shell command execution. Authenticated users with admin panel access can inject shell metacharacters into the alias parameter to...

8.8CVSS6.7AI score0.01799EPSS
SaveExploits0References6
Kitploit
Kitploit•added 2026/09/29 3:13 p.m.•10 views

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb 착취 시뮬레이션 CVE-2025-64446 & CVE-2025-58034 참고 사항: 이 문서는 학습 및 보안 연구 목적으로만 제공됩니다. 허가 없이 시스템을 공격하는 데 사용하지 마십시오. 1. 개요 FortiWeb은 웹 애플리케이션을 보호하는 WAFWeb Application Firewall 장치입니다. 2025년에 두 가지 심각한 취약점이 발견되었습니다: CVE-2025-64446 – 경로 탐색Path Traversal을 통한 인증 우회 CVE-2025-58034 – OS 명령 주입 2...

9.8CVSS8AI score0.91838EPSS
SaveExploits21
Kitploit
Kitploit•added 2026/09/29 1:28 p.m.•16 views

CVE-2026-39949

CVE-2026-39949: Cacti에서 호스트 변수 주입을 통한 인증된 원격 코드 실행 요약 Cacti ≤ 1.2.30의 OS 명령 주입 취약점으로 인해 장치 및 그래프 템플릿 생성 권한이 있는 모든 인증된 사용자가 기본 서버에서 임의의 명령을 실행할 수 있습니다. 이 결함은 사용자가 제어하는 호스트 메타데이터 필드특히 장치 메모 필드가 Cacti의 변수 대체 엔진을 통해 RRDtool 명령줄 인수에 삽입될 때 삭제 또는 이스케이프 없이 처리되기 때문에 발생합니다. 공격자는 메모 필드에 셸 메타문자를 삽입하고...

7.4AI score
SaveExploits2
Kitploit
Kitploit•added 2026/09/29 1:21 p.m.•9 views

CVE-2015-10141

CVE-2015-10141 – XDebug 원격 코드 실행 RCE CVE-2015-10141은 인증되지 않은 OS 명령 삽입 취약점으로, Xdebug 버전 2.5.5 및 이전 버전 에 영향을 미칩니다. 근본 원인: Xdebug의 원격 디버깅 기능이 활성화되면 확장 프로그램이 포트 9000 에서 수신 대기하며, 어떠한 인증도 없이 디버거 프로토콜 명령을 수락합니다. 공격 벡터: 공격자는 이 인터페이스를 통해 특수하게 조작된 eval 명령을 전송하여 임의의 PHP 코드를 실행할 수 있으며, 이를 통해 system 또는...

9.3CVSS6.2AI score0.07386EPSS
SaveExploits2References1
NVD
NVD•added 2026/09/29 1:17 p.m.•8 views

CVE-2026-102437

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

7.8CVSS0.00992EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/09/29 12:06 p.m.•6 views

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

7.8CVSS6.5AI score0.00992EPSS
SaveExploits0References2
OSV
OSV•added 2026/09/29 12:06 p.m.•4 views

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

7.8CVSS6.3AI score
SaveExploits0References5
EUVD
EUVD•added 2026/09/29 12:06 p.m.•7 views

EUVD-2026-88756

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

7.8CVSS6.5AI score0.00992EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/29 12:06 p.m.•39 views

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

7.8CVSS0.00992EPSS
SaveExploits0References2
CVE
CVE•added 2026/09/29 12:06 p.m.•16 views

CVE-2026-102437

The esengine DeepSeek-Reasonix (Reasonix Studio) desktop application contains an OS Command Injection vulnerability in the internal/gitcmd component. The root cause is the improper neutralization of special elements during the invocation of git diff filter.clean/smudge . A local attacker who can ...

7.8CVSS6.5AI score0.00992EPSS
SaveExploits0References2
Kitploit
Kitploit•added 2026/09/29 10:40 a.m.•12 views

CVE-2026-27626-PoC

CVE-2026-27626 — OliveTin OS Command Injection PoC Summary | ---|--- CVE ID| CVE-2026-27626 Component| OliveTin Vulnerability Class| CWE-78: Improper Neutralization of Special Elements used in an OS Command CVSS 3.1| 9.9–10.0 Critical — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Versions| All...

9.9CVSS8.5AI score0.00652EPSS
SaveExploits2References2
Kitploit
Kitploit•added 2026/09/29 9:57 a.m.•12 views

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager버전 사용법 CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

9.4CVSS6.3AI score0.02013EPSS
SaveExploits15References1
Kitploit
Kitploit•added 2026/09/29 9:25 a.m.•13 views

CVE-2022-25064

CVE-2022-25064 이 스크립트는 TPLink WR840N 라우터의 OS Command Injection 취약점을 악용하며, IPv6 프로토콜의 구성 함수를 사용합니다...

9.8CVSS7.7AI score0.36473EPSS
SaveExploits3
Kitploit
Kitploit•added 2026/09/29 7:56 a.m.•14 views

CVE-2023-26039

CVE-2023-26039 설명 ZoneMinder는 Linux용 무료 오픈 소스 폐쇄회로 텔레비전 소프트웨어 애플리케이션으로, IP, USB 및 아날로그 카메라를 지원합니다. 1.36.33 및 1.37.33 이전 버전에는 /web/api/app/Controller/HostController.php의 daemonControl을 통한 OS 명령 삽입이 포함되어 있습니다. 인증된 모든 사용자는 웹 사용자로 모든 셸 명령을 실행하는 API 명령을 구성할 수 있습니다. 이 문제는 1.36.33 및 1.37.33 버전에서 패치되었습니다...

8.8CVSS8.3AI score0.01257EPSS
SaveExploits1
Rows per page
Query Builder