73297 matches found
CVE-2026-100838
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw in the CopyFile verification that allowed arbitrary writes to the guest root filesystem. A malicious process on the untrusted host able to...
CVE-2025-71426
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...
MySQL-Remote-Root-Code-Execution
MySQL-Remote-Root-Code-Execution Uso python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...
Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload
Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...
Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()
Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...
WAVLINK WN530H4 live_api.cgi - Command Injection
A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...
Cisco Secure Firewall Management Center - Authentication Bypass
Cisco Secure Firewall Management Center Software contains an authentication bypass caused by improper system process creation at boot, letting unauthenticated remote attackers execute scripts and gain root access, exploit requires crafted HTTP requests. id: CVE-2026-20079 info: name: Cisco Secure...
Cisco ISE - Remote Code Execution
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to...
Klog Server <=2.41 - Unauthenticated Command Injection
Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...
ghostlock-app
GhostLock-App 中文: READMEZH.md Supported Devices Kernel| Devices ---|--- 6.1.115-android14-11-ga2521ca27699-ab13294383| POCO X6 Pro 6.1.118-android14-11-ga3b9c44908dd-ab13320413| Redmi Note 15 Pro+ 6.1.118-android14-11-gca0ef6d17716-ab13624819| Xiaomi 14...
Vulnerability-DLink-CVE-2025-14659
CVE-2025-14659: D-Link DHCP Daemon Command Injection Analysis Recreate CVE Project | Offensive Security Author: Peter Lin Date: May 2026 Project Pitch: CVE-2025-14659 reported a command injection vulnerability targeting the DHCP daemon component present in the D-Link DIR-860LB1 wireless router...
CVE-2026-100838
The Contrast confidential-computing runtime for Kubernetes (versions before 1.19.1 ) contains a flaw in the CopyFile verification of policies generated by the Contrast CLI. This vulnerability allows a malicious process on an untrusted host, capable of connecting to the Kata agent VSOCK , to issue...
CVE-2016-6662
CVE-2016-6662 De SQL injection a root shell con CVE-2016-6662 por MaYaSeVeN Prueba de concepto: https://www.youtube.com/watch?v=lyc7GFE3q2U...
CVE-2024-3400-Palo-Alto-OS-Command-Injection
Pasos : 1. Verifique si el archivo 0xr2r.txt está presente en el dispositivo ejecutando la siguiente solicitud get o podemos verificarlo abriendo https://domain.com/global-protect/portal/images/0xr2r.txt URL en el navegador si obtiene una respuesta 404, eso significa que el archivo no está...
CVE-2023-26866
CVE-2023-26866 Descripción La unidad interior WR-1200 de OH736 de GreenPacket y la OT-235, con las versiones de firmware M-IDU-1.6.0.3V1.1 y MH-46360-2.0.3-R5-GP respectivamente, son vulnerables a inyección remota de comandos. Los comandos se ejecutan mediante ejecución previa al inicio de sesión...
vsftpd2.3.4PyExploit
vsftpd2.3.4PyExploit Un exploit para obtener root en vsftpd 2.3.4 CVE-2011-2523 escrito en python Uso: ./exploit.py $VictimIPaddress ¡Atención! El exploit abre una shell que no es reversa. Recomiendo abrir una reverse shell después del exploit. No lo hice aquí porque no quería asumir qué tipo de...
CVE-2021-3156-plus
CVE-2021-3156 Esta es una modificación de almacén basada en @CptGibbon y admite la ejecución de comandos arbitrarios. Lectura relacionada: CVE-2021-3156 - Exploit修改 PoC de shell root para CVE-2021-3156 sin fuerza bruta Con fines educativos, etc. Probado en: @CptGibbon Ubuntu 20.04 contra sudo...
CVE-2026-101045: Improper Neutralization of Special Elements used in an OS Command
Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...
A2A-ForensicTrace: Offline Verification of Tamper-Evident A2A Runtime Evidence
Security-relevant Agent2Agent A2A executions can cross organizational boundaries, leaving investigators without live access to all participating systems. Offline investigation involves checking preserved records and their cross-record relationships for consistency. This paper presents...