CVE-2026-90619

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

CVE-2026-90621 ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection

A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2026-90621

CVE-2026-90621 is an OS command injection vulnerability in ipa-lab HackingBuddyGPT (versions up to 0.5.0 ), affecting the ssh_run_command function within src/hackingBuddyGPT/extensions/ssh_run_command.py. The attack can be launched remotely and requires low privileges , with no user interaction n...

CVE-2026-90621 ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection

A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

EUVD-2026-77188

A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...

EUVD-2026-77178

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

CVE-2026-90619

0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04 ) is affected by an OS command injection in the Execute Endpoint of the file hexstrike_server.py . An unauthenticated remote attacker can manipulate the code/script argument to inject arbitrary OS commands. The proof-of-con...

CVE-2026-90619 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

CVE-2022-31499

CVE-2022-31499 漏洞标题：Nortek Linear eMerge E3-Series - 盲操作系统命令注入...

EUVD-2026-77177

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

CVE-2026-90618

GH05TCREW PentestAgent (up to commit cf882dabea3ed91cef016cdd115e5426315665a2) is vulnerable to OS command injection in the function LocalRuntime.execute_command within the file runtime/runtime.py. The flaw allows a remote, unauthenticated attacker with no user interaction to execute arbitrary co...

CVE-2026-90618 GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...

CVE-2026-90617 GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...

CVE-2026-90617

GH05TCREW PentestAgent contains an os command injection in the MCP HTTP Server component, specifically in the run_task function of interface/main.py . The vulnerability is reachable remotely with no privileges required, allowing an attacker to manipulate input to execute arbitrary OS commands. Im...

EUVD-2026-77176

A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...

PT-2026-91240

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

Artica Web Proxy 4.30 - OS Command Injection

Artica Web Proxy 4.30 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via servicecmdspeform. id: CVE-2020-17505 info: name: Artica Web Proxy 4.30 - OS Command Injection author: dwisiswant0...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- This is a D-Link RCE vulnerability detection program Vulnerability Overview D-Link DNS-320, etc., are NAS Network Attached Storage devices from D-Link China. Multiple D-Link products have a security vulnerability, which stems from erroneous operations on the parameter...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy 4.30.000000 Community Edition 以前に、複数の OS コマンドインジェクションの脆弱性 製品説明: Artica Tech は、通常は大企業や多国籍企業向けの、強力かつシンプルなソリューションを提供します。わずか99ユーロからの開始価格で、62,000以上のアクティブサーバーを擁する Artica Proxy は、過去10年間にわたりオープンソースプロジェクトとして開発され、低コストで中小企業や公共団体が組織と従業員をインターネットの危険から守る支援を行ってきました。 説明: Artica Proxy...