CVE-2025-24893-PoC

CVE-2025-24893 - XWiki 远程代码执行 RCE 这是一个针对 CVE-2025-24893 的更新版概念验证 PoC 利用代码，该漏洞是 XWiki 中的一个关键未认证 RCE 漏洞。此版本在原版基础上进行了改进，允许执行任意 shell 命令并实现干净的反弹 shell 注入。 作者: HexHunter404 ⚠️ 警告 此代码仅供教育和授权的渗透测试使用 。 请勿将其用于您不拥有或未经明确许可测试的系统上。 ✨ 功能特点 支持通过 bash -c '' 执行命令 完全支持反弹 shell（通过 base64 绕过 Groovy 限制） 改进了命令输出的处理 保留...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

Malicious code in botmaker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fdc86c67d202ca9938942ef7786534d1b72169187cce13b1cefd8899fa54aa On npm install, postinstall.js collects the installer's hostname, username, current working directory, architecture, platform, and network interface...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE エクスプロイトスキャナー CVE-2025-3248 このPythonベースのスキャナーは、Langflowインスタンスにおける認証なしのリモートコード実行（RCE） 脆弱性をCVE-2025-3248 を介して自動検出します。これは、/api/v1/validate/codeエンドポイントを悪用して任意のシェルコマンドを実行する概念実証ペイロードを使用します。 🚨 CVEの詳細 CVE : CVE-2025-3248 影響 : 認証なしのリモートコード実行 コンポーネント : Langflow API /api/v1/validate/code...

cve-2023-1671

Сve-2023-1671 cve-2023-1671https://vulners.com/cve/CVE-2023-1671 はどのように機能しますか? /opt/ws/bin/ftsblistpack は Perl スクリプトで、別の Perl スクリプトである /opt/ws/bin/sblistpack を呼び出します。 その中のシェルコマンドの引数は一重引用符で囲まれています： $rc += system"$sblistpack '$uri' '$user' '$filetype' '$filein' '$fileout'";...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ 和 OpenWire 1 Apache ActiveMQ 与 OpenWire 概述 ActiveMQ 是一个开源的消息传递和集成模式服务器，它包含支持 JMS 的代理（Broker），不仅可以在 Java 环境中使用，还能够实现使用多种语言的系统之间的通信。此外，通过集群功能、数据库以及文件系统，它维护了各系统之间的一致性和持久性。 OpenWire 是 Apache ActiveMQ 使用的一种二进制消息协议。它专为代理（ActiveMQ）与客户端之间的高效数据传输而设计。 CVE-2023-46604 是...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CVE-2026-51858

The camel-ai camel software versions v0.2.91a1 , v0.2.91a2 , and v0.2.91a3 are vulnerable to arbitrary shell command execution. The root cause is located in the TerminalToolkit.shell_exec function, which allows prompt-driven command execution without an approval boundary . This flaw falls under C...

EUVD-2026-90422

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CVE-2026-51858: Undefined Security Weakness

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

Linux Distros Unpatched Vulnerability : CVE-2026-102422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any...

EUVD-2026-89334

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2026-102828 simple-git unsafe-operation guard does not block trailer command configuration

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the default blockUnsafeOperationsPlugin does not classify trailer..cmd as unsafe configuration. An application that passes...

CVE-2026-102697 Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to properly parse shell syntax. Attackers who can influence model output through prompt injection can execute additional shell commands by...

CVE-2026-75600

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...

CVE-2026-75600

FreePBX, an open-source IP PBX, is vulnerable to Host Command Injection in versions prior to 17.0.9 . The vulnerability exists in the GraphQL api module's documentation generator , which accepts an authenticated host parameter and incorporates it into a shell command without proper validation or ...

CVE-2026-75600 FreePBX: Authenticated API generatedocs Host Command Injection

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...

CVE-2026-75600 FreePBX: Authenticated API generatedocs Host Command Injection

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...