CVE-2025-64155

CVE-2025-64155: Iniezione di argomenti in Fortinet FortiSIEM con esecuzione di codice in remoto Proof of concept per Fortinet FortiSIEM che sfrutta un'iniezione di argomenti per scrivere un file e ottenere l'esecuzione di codice come root Post del blog Analisi approfondita qui: Horizon3.ai -...

CVE-2018-18852

CERIO router RCE autenticado credenciais de vendedor backdoor CVE-2018-18852 PoC em Python hook-s3c github.com/andripwn, @andripwn no Twitter PoC em Python funcional para CVE-2018-18852, originalmente aparecendo em; https://github.com/andripwn/CVE-2018-18852 Visão geral Os modelos e variantes de...

CVE-2025-20393

CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...

CVE-2025-6019

Verwendung sudo apt install xfsprogs sudo su wget https://raw.githubusercontent.com/boboaung1337/CVE-2025-6019/refs/heads/main/exploit.sh && chmod +x exploit.sh ./exploit.sh Modus auswählen: 1 Lokal: 300 MB XFS-Image erstellen erfordert root 2 Ziel: Zielsystem ausnutzen auf dem Opfer ausführen 3...

CVE-2017-1000117-test

Descrizione del funzionamento Questo sfrutta la vulnerabilità CVE-2017-1000117. Quando si clona questo repository con il comando git con l'opzione --recurse con privilegi di root, viene avviato automaticamente un server http in ascolto sulla porta 12345. Per fermare il server http, trova il numer...

CVE-2020-17456

Descrizione Il 21 agosto 2020, è stato esposto che il router SLC 130 di seown presenta una vulnerabilità RCE di autenticazione. Il numero della vulnerabilità è cve-2020-17456. La vulnerabilità è dovuta all'iniezione di comandi ping nella funzione di diagnostica del servizio Web del router. In...

CVE-2019-8561

CVE-2019-8561 Exploit di prova di concetto per CVE-2019-8561 scoperto da Jaron Bradley @jbradley89 Corretto in macOS 10.14.4. Questo script sfrutta un bug TOCTOU in installer che consente l'esecuzione di codice come root. Vedi il talk di Jaron all'Objective By the Sea v2 "Bad Things in Small...

CVE-2021-38647

CVE-2021-38647 CVE-2021-38647 – POC zur Ausnutzung von nicht authentifiziertem RCE OMIGOD auf Azure UNIX/Linux-VMs! Details In Microsofts Azure wird die OMI-Anwendung automatisch installiert, wenn Dienste wie Azure Automation Accounts, Update Management, Log Analytics, Configuration Management us...

CVE-2022-27251

CVE-2022-27251 تنفيذ التعليمات البرمجية عن بُعد في LocalStack 0.12.6 بسبب عدم تعقيم مدخلات المستخدم في حقل معالج Lambda API أثناء إنشاء دوال Lambda، والطريقة غير الآمنة التي تُنشأ بها حاويات Docker، يمكن حقن أمر عبر AWS CLI في خيار --handler ليتم تنفيذه بواسطة عملية root أثناء إنشاء وتشغيل حاويات...

CVE-2026-66152

A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

CVE-2019-8627

CVE-2019-8627 una perdita di informazioni del kernel su macOS= 10.14.4 =============================== Come riprodurre: 1. attiva il firewall 2. esegui la prova di concetto come root 3. scollega la rete Belkin USB-C LAN e poi ricollega la rete Belkin USB-C LAN. dopo queste operazioni otterrai i...

D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection

OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...

coolify-cve-2025-66209-66213

Coolify Security Advisories - CVE-2025-66209 bis CVE-2025-66213 Melder: 0xrakan Hersteller: coollabsio/coolify Betroffene Versionen: v4.0.0-beta.451 Behobene Version: v4.0.0-beta.451 Schweregrad: Kritisch CVSS 9,4 Überblick Fünf kritische, authentifizierte Command-Injection-Schwachstellen wurden ...

PT-2026-81517

A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root...

CVE-2026-71925

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71914

Multiple DrayTek VigorAP models contain a command injection vulnerability in the drayapm component. The vulnerability is caused by insufficient validation of UDP message content after STARTSPEEDTEST before command execution. A remote attacker can trigger this vulnerability via a crafted message t...

CVE-2026-71910

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and CMD6 fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

EUVD-2026-64990

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftpupgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...

EUVD-2026-64985

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...