WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read

WGDashboard = 4.2.3 contains a command injection caused by multiple OS command injection points, letting authenticated attackers execute arbitrary commands as root. id: CVE-2026-15733 info: name: WGDashboard = 4.3.2 - Authenticated OS Command Injection /etc/passwd Read author: str4k3r,0xAkoko...

sendmail-clamav-exploit-CVE-2007-4560

Exploit Sendmail + ClamAV-Milter CVE-2007-4560 Exploit Python RCE pour Sendmail avec ClamAV-Milter 0.91.2 CVE-2007-4560. Injection de commandes root à distance via les en-têtes SMTP RCPT TO. À propos Port Python de l'exploit classique Sendmail/ClamAV-Milter pour root à distance, écrit à l'origine...

CVE-2026-20079

🚨 CVE-2026-20079 "गंभीर Cisco FMC ज़ीरो-डे" Cisco Secure Firewall Management Center में क्रिटिकल प्रमाणीकरण बायपास जिसके कारण रूट RCE होता है 📋 अवलोकन CVE-2026-20079 Cisco Secure Firewall Management Center FMC सॉफ्टवेयर के वेब इंटरफ़ेस में एक गंभीर कमजोरी है। एक अप्रमाणित दूरस्थ हमलावर प्रमाणीकरण...

cpanel-pwn

cpanel-pwn cPanel/WHM 보안 테스트 툴킷. CVE-2026-41940 CRLF 인젝션 인증 우회 및 사후 침투 권한 상승을 구현합니다. 도구 스크립트| 용도 ---|--- cpanelexploit.py| CVE-2026-41940: CRLF 인젝션 → WHM 인증 우회 → 루트 접근 CVE-2026-41940 유형: CRLF 인젝션 → 인증 우회 → 루트 RCE 영향 대상: 패치 버전 이전의 cPanel/WHM 공격 방식: Basic Auth 헤더의 사전 인증 CRLF 인젝션으로 서버 측 세션 파일에...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase महत्वपूर्ण सैंडबॉक्स एस्केप अप्रमाणित / निम्न-विशेषाधिकार → रूट रिमोट कोड निष्पादन NocoBase में 📌 अवलोकन CVE-2026-34156 NocoBase एक ओपन-सोर्स नो-कोड/लो-कोड प्लेटफॉर्म में एक महत्वपूर्ण सैंडबॉक्स एस्केप भेद्यता है। एक हमलावर जो वर्कफ़्लो स्क्रिप्ट नोड बना या निष्पादित क...

PT-2026-84805

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description A flaw in the Silicon One integration for specific Cisco Nexus 9000 Series Switches allows an unauthenticated remote attacker to execute code with root privileges. Th...

CVE-2025-31644

CVE-2025-31644: F5 BIG-IP में एप्लायंस मोड में कमांड इंजेक्शन "save" कमांड का "file" पैरामीटर कमांड इंजेक्शन हमले के प्रति संवेदनशील है, जो "/mgmt" वेब API या SSH "tmsh" शेल तक प्रशासकीय विशेषाधिकार वाले प्रमाणित हमलावर को लक्ष्य प्रणाली पर "root" उपयोगकर्ता के रूप में रिमोट कोड निष्पादन प्राप्त...

Cisco-ASA-vulnerability-research

LINAFULLRE — هندسة عكسية بتغطية كاملة لـ lina أُنشئ: 2026-08-12 الهدف: labasav9-12-4-67/lina ASAv 9.12467، ELF x86-64، PIE؛ قاعدة صورة Ghidra 0x100000؛ 112,687 دالة ، 167 MB مُعيَّنة، 642,707 رمزًا هدف المسار: تغطية هندسة عكسية منهجية كاملة للملف الثنائي lina — مُكمِّلةً للهندسة العكسية المستهدَف...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

CVE-2026-65400-poc

CVE-2026-65400 — قراءة ملفات بصلاحية الجذر قبل المصادقة في مشاركة شاشة macOS إثبات مفهوم للقراءة فقط إثبات مفهوم للقراءة فقط. يوضّح تجاوز المصادقة بقراءة ملف للجذر فقط من مضيف معرّض. لا يكتب شيئًا على الهدف: لا LaunchDaemon ولا ملف بدء تشغيل الصدفة ولا crontab ولا سلسلة RCE. تم التشغيل على جهاز M...

aapanel-ws-bypass

aaPanel: विक्रेता हमेशा चीजों को ठीक से नहीं ठीक करते CVE-2021-37840 का अधूरा सुधार अभी भी 5 साल बाद 3.6M सर्वरों को रूट RCE के लिए उजागर करता है खोजकर्ता: EON Security CVE: असाइनमेंट लंबित CVSS: 8.8 उच्च — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H प्रभावित: aaPanel संस्करण 6.8.12 से 7.65.0 2021 के सुध...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE RCE दो कमजोरियों का दुरुपयोग करके प्राप्त किया जाता है CVE-2026-55494 CVE-2026-62308 संक्षेप में, एक SSRF कमजोरी का दुरुपयोग करके आंतरिक नेटवर्क में एक अप्रमाणित सेवा को कॉल किया जाता है ताकि एक डॉकर बनाया जा सके जो tugtainer के साथ समान pid साझा करता है, इस प्रकार...

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher Olivier Laflamme has disclosed two independent root remote code execution RCE chains affecting the Unitree G1 EDU , including a Bluetooth Low Energy BLE path that can reach root on the robot's Locomotion PC. The flaws are tracked asCVE-2026-76639 and CVE-2026-76640 , with the...

CVE-2026-63404

Faktory is a language-agnostic background job server. In versions prior to 1.10.0 , its embedded Redis bootstrapper writes startup configuration to the fixed, world-writable path /tmp/redis.conf , creating the file only if absent and never validating it on subsequent boots. A local unprivileged u...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63125 Incus vulnerable to root RCE via image backup.yaml symlink

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user a non-admin TLS/RBAC identity with cancreateimages and cancreateinstances can execute arbitrary code as root on the host. A crafted image ships backup.yaml as a symlink to...

CVE-2026-63125 Incus vulnerable to root RCE via image backup.yaml symlink

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user a non-admin TLS/RBAC identity with cancreateimages and cancreateinstances can execute arbitrary code as root on the host. A crafted image ships backup.yaml as a symlink to...

CVE-2026-72840 OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-63294 Root RCE via image backup.yaml symlink

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can...

CVE-2026-42200

Coolify prior to 4.0.0-beta.474 is affected by a path traversal in the PostgreSQL initialization script handling (generate_init_scripts() in app/Actions/Database/StartPostgresql.php). An authenticated user could write files outside the intended directory during database initialization, enabling c...