CVE-2026-129125

C-Kermit versions 6.0.192 before 11.1.515 are vulnerable to remote code execution (RCE) due to improper validation during REMOTE QUERY evaluation. An attacker can execute arbitrary shell commands on the server, even if host commands are disabled, by either directly invoking the command function v...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

geo-sleuth

🧭 geo-sleuth An agent skill that finds where a photo was taken — and shows its work. Works with …and any other agent that reads SKILL.md and runs shell commands. !From...

wosind

Readme for "wosind.py" This software is licensed under GPLGNU GPLv3. This tool combines a lot of possibilties of OpenSource Intelligence. The tool uses local shell commands, like ping, host ... and external resources as nmap or external webservices. 1. System prerequisites MacOS oder Linux window...

CVE-2025-57489

CVE-2025-57489 Description From the developer's blog: When the lock in SuperDuper is unlocked to allow execution to occur without having to enter an administrator password, a 3rd party program could make use of our authorization to run something other than a backup with administrator privileges...

AndroBugs_Framework

AndroBugs Framework AndroBugs Framework is an Android vulnerability analysis system that helps developers or hackers find potential security vulnerabilities in Android applications. No splendid GUI interface, but the most efficient less than 2 minutes per scan in average and more accurate. Versio...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFDReflected File Download for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'api.php' script to download a file containing shell commands CVE-2017-8809. The file will be served by the target sit...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1794220724)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794220724 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quot...

AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1794220724)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794220724 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted...

Malicious code in qzc690385 (PyPI)

Source: amazon-inspector 84cc8690335a9ed7454c095286b0a9fd18141513f6d619e62a28d1b5f4751beb On sdist install, setup.py writes a Python HTTP server to /tmp/.zqx and launches it detached via nohup... & with startnewsession=True. The server binds 0.0.0.0 on ports 9998, 9999, 8089, 8099, and 8777 and...

Cve-2026-55944

Conversation with Gemini This is my PoC code for cve-2026-55944.....i want to publish it on GitHub....^@^A^@^A^F��^Ausing System; using System.Diagnostics; using System.Text; using System.Xml.Linq; namespace TermuxPayload class Program static void Mainstring args // Base64 encoded payload tailore...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1793956786)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793956786 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

CVE-2026-76826 tsParticles: Generated release notes can execute shell commands in the stable publish workflow

tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAWRELEASE.md. Contributor-controlled shell...

PT-2026-136328

Name of the Vulnerable Software and Affected Versions Elo versions prior to 1.0.1 Description The Ruby backend in src/compilers/ruby.ts fails to escape the character when embedding text in Ruby double-quoted strings. This allows Ruby interpolation to occur in the string-literal emitter or the...

CVE-2026-120203

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...