CVE-2026-84285

An OS Command Injection vulnerability in Tuleap Enterprise Edition (versions 17.3 through 17.5) allows a network-based attacker with low privileges to execute arbitrary commands on the server , rated CVSS 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. The vulnerabili...

patch-CVE-2026-04321

Parche: CVE-2026-04321 Detalles de la vulnerabilidad CVE : CVE-2026-04321 Producto : Firewall Zyxel Descripción : Inyección de comandos del sistema operativo Severidad : Crítica Estado del parche: DESPLEGADO...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly中间件API远程代码执行 经身份验证的RCE：Hoverfly ≤ 1.11.3中的OS命令注入 漏洞概述...

CVE-2020-24032

CVE-2020-24032 Descripción sugerida tz.pl en los appliances virtuales XoruX LPAR2RRD y STOR2RRD 2.70 permite la inyección de comandos del sistema operativo mediante metacaracteres de shell en una zona horaria, a través de cmd=set&tz=OS. Tipo de vulnerabilidad Otro Inyección de comandos del sistem...

CVE-2021-46422

CVE-2021-46422 韩国的无线路由器 os cmd 注入 安装 root@kitploit: git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt 使用 单个url pocsuite -r ../CVE-2021-46422.py -u url --verify 批量URL pocsuite -r ../CVE-2021-46422.py -f url.txt --verify root@kitploit: 免责声明...

Vulnerability-Research

🛡️ Investigación de Vulnerabilidades Aquí, catalogo las vulnerabilidades que he descubierto, los informes correspondientes que contienen detalles de las debilidades y las perspectivas sobre su impacto y remediación. 🏆 CVEs Asignados...

CVE-2024-56115

CVE-2024-56115 Descripción sugerida Existe una vulnerabilidad en Amiro.CMS anterior a 7.8.4 debido a la falta de medidas para neutralizar elementos especiales. Permite a atacantes remotos llevar a cabo un ataque de Cross-Site Scripting XSS. Tipo de vulnerabilidad CWE-78 | Neutralización incorrect...

CVE-2026-4480-POC

CVE-2026-4480 - Ejecución Remota de Código en el Subsistema de Impresión de Samba Resumen Prueba de concepto y material de investigación relacionado con CVE-2026-4480 , una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta al subsistema de impresión de Samba. La vulnerabilidad e...

CVE-2022-31499

CVE-2022-31499 Título del exploit: Nortek Linear eMerge E3-Series - Inyección ciega de comandos del sistema operativo...

CVE-2026-55897: Improper Neutralization of Special Elements used in an OS Command

luci-app-advanced-reboot is a LuCI web interface application for OpenWrt that provides a way to reboot your router into an alternative firmware partition or perform reboot operations directly from the web UI. Prior to 1.1.2-6, the luci-app-advanced-reboot read ACL in...

CVE-2026-89139: Improper Neutralization of Special Elements used in an OS Command

Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that...

VulnCheck KEV: CVE-2026-79756

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...

CVE-2026-62371: Improper Neutralization of Special Elements used in an OS Command

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until 1.21.2, 1.22.2, and 1.23.1, the v1alpha2 NodeUpgradeJob handler in edge/pkg/taskmanager/actions/nodeupgradejob.go concatenates authenticated...

CVE-2026-62182: Improper Neutralization of Special Elements used in an OS Command

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until 1.21.2, 1.22.2, and 1.23.1, ConfigUpdateJob processing in edge/pkg/taskmanager/actions/configupdatejob.go concatenates authenticated user-controlled...

CVE-2026-93012: Improper Neutralization of Special Elements used in an OS Command

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in sendmailpipe. On MSWin32 the envelope sender and every recipient go into a single command string, which open passes to a...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

cve-2019-15107-lab

CVE-2019-15107 – Laboratorio de RCE no autenticado en Webmin 1. Descripción general del proyecto Este proyecto demuestra CVE-2019-15107, una vulnerabilidad crítica de ejecución remota de código RCE en Webmin, dentro de un entorno Docker controlado y aislado. El laboratorio cubre el ciclo de vida...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- 这是一个D-Link rce漏洞 检测程序 漏洞简介 D-Link DNS-320等都是中国友讯（D-Link）公司的一款NAS（网络附属存储）设备。 D-Link多款产品存在安全漏洞，该漏洞源于对参数name的错误操作会导致操作系统命令注入。以下产品及版本受到影响：D-Link DNS-320、DNS-320LW、DNS-325和DNS-340L 20241028版本及之前版本 网络测绘 app="DLink-DNS-ShareCenter"...

CVE-2020-13159

CVE-2020-13159 - 在 Artica Proxy 4.30.000000 Community Edition 之前版本中存在多个操作系统命令注入漏洞 产品描述： Artica Tech 提供强大但易于使用的解决方案，这通常是大型和跨国公司的专属。Artica Proxy 的起价仅为 99 欧元，拥有超过 62,000 台活跃服务器，在过去 10 年中作为开源项目开发，帮助中小企业和公共机构以低成本保护其组织和员工免受网络威胁。 描述： 在 Artica Proxy 4.30.000000 Community Edition 之前版本中，攻击者可以通过 Netbios...

DEBIAN-CVE-2026-94106

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding...