Lucene search
+L

4250 matches found

Kitploit
Kitploit
added 2026/09/13 6:37 a.m.4 views

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

10CVSS7.3AI score0.82612EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 5:15 a.m.5 views

CVE-2022-1292

CVE-2022-1292 Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands...

10CVSS6.9AI score0.82612EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 2:56 a.m.7 views

CVE-2024-51567

CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python proof-of-concept PoC exploit script for CVE-2024-51567 , a critical command injection vulnerability affecting CyberPanel v2.3.6. This vulnerability, found in the upgrademysqlstatus endpoint, enables remote command execution RCE by bypassing...

10CVSS8.4AI score0.86518EPSS
SaveExploits7
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.37 views

Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

10CVSS8.7AI score0.25853EPSS
SaveExploits5References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.153 views

Viessmann Vitogate 300 - Remote Code Execution

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method. id: CVE-2023-45852 info: name: Viessmann Vitogate 300 - Remote Code Execution autho...

9.8CVSS7.3AI score0.14003EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.71 views

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

10CVSS8.7AI score0.21842EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.91 views

Websvn <2.6.1 - Remote Code Execution

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. id: CVE-2021-32305 info: name: Websvn 2.6.1 - Remote Code Execution author: gy741 severity: critical description: WebSVN before 2.6.1 allows remote attackers to execute...

10CVSS8.5AI score0.8719EPSS
SaveExploits9References5
Kitploit
Kitploit
added 2026/09/12 8:16 p.m.4 views

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

9.8CVSS8.2AI score0.1393EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 8:12 p.m.6 views

CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

9.1CVSS8.6AI score0.0157EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:45 p.m.6 views

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

10CVSS7.3AI score0.82612EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 1:24 p.m.5 views

CVE-2007-2447

CVE-2007-2447 Vulnerabilidad de inyección remota de comandos CVE-2007-2447, permite a atacantes remotos ejecutar comandos arbitrarios especificando un nombre de usuario de Samba que contenga metacaracteres de shell...

6CVSS8.1AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/12 10:52 a.m.4 views

CVE-2007-2447

CVE-2007-2447 - username map script "The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows...

6CVSS8.6AI score0.49759EPSS
SaveExploits18
EUVD
EUVD
added 2026/09/12 12:31 a.m.11 views

EUVD-2026-76749

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS0.00234EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 10:24 p.m.4 views

CVE-2025-64155-hunter

Escáner CVE-2025-64155 Un escáner en Python para detectar la vulnerabilidad de inyección de comandos CVE-2025-64155 en el servicio Phoenix Monitor. Descripción CVE-2025-64155 es una vulnerabilidad de inyección de comandos en el servicio Phoenix Monitor que permite la ejecución remota de código a...

9.8CVSS8.4AI score0.45427EPSS
SaveExploits4References1
NVD
NVD
added 2026/09/11 10:16 p.m.9 views

CVE-2026-90444

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 9:46 p.m.16 views

CVE-2026-90444

CVE-2026-90444 describes a shell metacharacter injection vulnerability in a file-transfer interface within an ICS/OT product (per CISA advisory ICSA-26-254-01). The interface requires valid credentials but does not restrict shell metacharacters in uploaded filenames. An automated process later co...

8.7CVSS0.00234EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 9:46 p.m.5 views

CVE-2026-90444

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS6.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 9:46 p.m.27 views

CVE-2026-90444

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's name, allowing an authenticated attacker to embed and execute arbitra...

8.7CVSS0.00234EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 8:16 p.m.8 views

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...

9.8CVSS5.9AI score0.01749EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/11 4:17 p.m.4 views

CVE-2026-89066

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS0.00157EPSS
SaveExploits0References3
Rows per page
Query Builder