CVE-2025-61304

CVE-2025-61304 "Уязвимость внедрения OS-команд в ping-расширение Dynatrace ActiveGate до версии 1.016 через специально сформированный IP-адрес" В фоновом режиме ping-расширение использует командную строку Windows для выполнения ping. Поле ввода для Test Target Host также имеет длину 1024 символа...

CVE-2022-25064

CVE-2022-25064 Ce script exploite une vulnérabilité d'injection de commandes OS dans le routeur TPLink WR840N, en utilisant la fonction de configuration du protocole IPv6...

cve-2017-12945

CVE-2017-12945 Эксплойт для CVE-2017-12945 Уязвимость удалённого аутентифицированного слепого внедрения команд ОС существует в Mersive Solstice Pods — беспроводной платформе для совместной работы и презентаций, разработанной Mersive Technologies Inc. — работающих на версиях прошивки до 2.8.4, как...

CVE-2024-56115

CVE-2024-56115 Предлагаемое описание Уязвимость в Amiro.CMS до версии 7.8.4 существует из-за отсутствия мер по нейтрализации специальных элементов. Она позволяет удаленным злоумышленникам провести атаку с использованием межсайтового скриптинга XSS. Тип уязвимости CWE-78 | Неправильная нейтрализац...

CVE-2024-29269-RCE

🚀 Exploit CVE-2024-29269 Ce dépôt contient un exploit pour la vulnérabilité CVE-2024-29269, qui permet l'exécution de commandes OS sans authentification sur les routeurs TLR-2005KSH. Cet exploit tire parti de la vulnérabilité pour exécuter des commandes arbitraires sur les routeurs concernés. ✨...

Vulnerability-Research

🛡️ Исследование уязвимостей Здесь я веду каталог обнаруженных мной уязвимостей: соответствующие отчёты write-ups с подробным описанием слабых мест, а также сведения об их влиянии и способах устранения. 🏆 Присвоенные CVE...

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution RCE ...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL 인젝션 인증됨 개요 CVE-2023-31702 은 MicroWorld Technologies eScan Management Console 버전 14.0.1400.2281 에서 발견된 인증된 SQL 인젝션 취약점입니다. 이 취약점은 GetUserCurrentPwd 엔드포인트에 존재하며, UsrId 매개변수가 적절한 정화새니타이제이션나 매개변수화 없이 SQL 쿼리에 직접 전달됩니다. 인증된 공격자는 이 결함을 악용하여 시간 기반 블라인드 SQL 인젝...

CVE-2026-79756

Nuclio is a serverless framework for real-time events and data processing. Prior to version 1.17.4 , an incomplete fix for unauthenticated OS command injection in the Nuclio dashboard on the local/Docker platform leaves the list-all resource path vulnerable: when no specific resource name is prov...

CVE-2026-69212

CVE-2025-69212 — Injection de commandes OS dans OpenSTAManager RCE Preuve de concept d'exploitation pour CVE-2025-69212 , une vulnérabilité d'injection de commandes OS dans OpenSTAManager = 2.9.8 qui permet à un attaquant authentifié d'exécuter du code à distance via un fichier ZIP malveillant...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 원격 코드 실행 취약점을 트리거하려면 "소프트웨어 패키지 업데이트" 모듈에 접근할 수 있어야 합니다. 이 모듈에 접근 권한이 있는 사용자는 새 패키지 설치 중 OS 명령 주입을 통해 시스템에서 루트 권한으로 명령을 실행할 수 있습니다. HTTP 요청: root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000 Cookie: redirect=1;...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

CVE-2026-53611

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

EUVD-2026-70199

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation

Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...

CVE-2026-84675

CVE-2026-84675 is an OS command injection vulnerability in the Jenkins TICS Plugin , affecting versions 2025.1.1 and earlier . Attackers who can control build environment variable values can execute arbitrary commands on the agent running the build. The vulnerability has a CVSS 3.1 base score of ...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

EUVD-2026-70148

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - Injection de commandes OS via le point de terminaison tracer-behavior Fortinet FortiSandbox est une solution avancée de protection contre les menaces qui crée des environnements isolés pour analyser les fichiers suspects, les URL et le trafic...