CVE-2026-90847

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iuxset.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and ma...

CVE-2026-90843

A security vulnerability has been detected in SabyasachiRana WebMap up to 8b95fe4dc301a3c09ddf145b895de0bf9f8d2a25. This affects the function nmapnewscan of the file functionsnmap.py of the component New Nmap Scan Handler. Such manipulation of the argument target/params leads to os command...

CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property...

CVE-2026-16466

CVE-2026-16466 affects IBM DataStage on Cloud Pak for Data version 5.4.0.0 , where an OS command injection flaw (CWE-78) allows a remote authenticated attacker to execute arbitrary commands with a CVSS score of 8.8 (HIGH) , impacting confidentiality, integrity, and availability. The vulnerability...

CVE-2026-16466 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

EUVD-2026-77790

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

CVE-2026-16673

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a vulnerability where improper neutralization of special characters in the PxPeek name property allows a remote authenticated attacker to execute arbitrary OS commands . The CVSS 3.1 score is 8.8 (High) with a network vector, low complexity, an...

EUVD-2026-77789

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property...

CVE-2026-17133

IBM App Connect Enterprise (v13.0.1.0–13.0.8.0 and v12.0.1.0–12.0.12.27) is vulnerable to arbitrary code execution via improper neutralization of special elements used in an OS command (CWE-78). A local attacker with no privileges but requiring user interaction could exploit this to achieve full ...

EUVD-2026-77786

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

cve-2017-12945

CVE-2017-12945 CVE-2017-12945 利用 Mersive Solstice Pods（由 Mersive Technologies Inc. 设计的无线协作和演示平台）在运行早于 2.8.4 版本的固件时，存在一个（远程）（经过身份验证的）（盲注）操作系统命令注入漏洞，正如供应商网站上所承认/报告的那样（见下方截图）。因此，经过身份验证的攻击者可以通过发送特制的 HTTP 请求，在存在漏洞的 Mersive Solstice Pods 上以 root 权限执行任意命令。 此漏洞的存在是由于服务端对输入/参数缺乏验证。一些用户控制的输入/参数被直接传递给 publi...

CVE-2026-54182

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...

poc-rebar3

Rebar3 Shell 注入（CVE-2020-13802） 概念验证 root@kitploit: git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean 致谢 Alexey Pronin @vulnbe 参考 Rebar3 漏洞分析 漏洞修复 PR CVE-2020-13802 CWE-78：OS 命令中特殊元素的不当中和（'OS 命令注入'）...

CVE-2025-34030-PoC

CVE-2025-34030 - sar2html 'plot' 参数 RCE CVSS: 10.0 严重 漏洞类型: OS 命令注入 编程语言: PHP 利用代码: Python 参考资料: https://nvd.nist.gov/vuln/detail/CVE-2025-34030 https://www.vulncheck.com/advisories/sar2html-command-injection 描述 sar2html 版本 ）。漏洞执行后的输出会显示在应用程序界面中，“select host” 包含命令输出。 概念验证...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: OS command injection via runnmapscan The runnmapscan MCP tool builds its command by string interpolation of the target and additionalFlags parameters and runs it through childprocess.exec, i.e. /bin/sh -c. ⚠ Read this first — duplicate identifier This vulnerabili...

CVE-2025-32375

漏洞版本设置 启动漏洞容器： root@kitploit: docker compose up 创建一个监听器（例如 ncat）： root@kitploit: ncat -klnv 1337 运行漏洞利用程序： root@kitploit: python3 exploit.py 如果一切正常，你应该会在 ncat 窗口中收到一个 HTTP 请求，其中包含 OS 命令（默认情况下为 id）的执行结果。 致谢 漏洞发现者：SeaW1nd 基于 VickyTheViking 的测试环境设置...

CVE-2022-25064

CVE-2022-25064 Este script explota una vulnerabilidad de inyección de comandos del sistema operativo en el router TPLink WR840N, utilizando la función configure del protocolo IPv6...

CVE-2026-28672

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder OS 命令注入 Apache Ranger user-sync（unixusersync）模块中 OS 命令注入漏洞的可运行概念验证复现程序。 在枚举每个已同步用户所属的组时，UnixUserGroupBuilder 会通过 shell 执行 id 命令，并将用户名 拼接到命令行中： root@kitploit: // ugsync/src/main/java/org/apache/ranger/unixusersync/process/UnixUserGroupBuilder.jav...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1韩国的无线路由器 os cmd 注入PoC 安装 root@kitploit: git clone https://github.com/ZAxyr/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt 使用 单个url pocsuite -r pocs/CVE-2021-46422.py -u IP 批量URL pocsuite -r pocs/CVE-2021-46422.py -f xxx.txt root@kitploit: 免责声明🧐...