RHEL 10 : mariadb10.11 (RHSA-2026:49522)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49522 advisory. MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation...

CVE-2026-52102: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters...

shell-quote npm Code Execution

The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

IEC 60870-5-104 Client

Connects to an IEC 104 server and creates an interactive IEC 104 shell session !/usr/bin/env python3 -- coding: utf-8 -- """IEC 60870-5-104 bind listener — opens an IEC 104 session for interrogation.""" from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

DNP3 TCP Client

Connects to a DNP3 outstation and creates an interactive DNP3 shell session !/usr/bin/env python3 -- coding: utf-8 -- """DNP3 TCP bind listener — opens a DNP3 session for interactive polling.""" from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

MIPS BE reverse TCP shell (raw)

MIPS big-endian 32-bit connect-back stager: socket, connect, dup2 x3, execve //bin/sh. Typical on older big-endian routers. Output is raw bytes not a command string. !/usr/bin/env python3 -- coding: utf-8 -- Linux/MIPS BE reverse TCP + dup2 + execve"//bin/sh" — based on public shellcode by rigan...

MIPS LE reverse TCP shell (raw)

MIPS little-endian 32-bit connect-back stager: socket, connect, dup2 x3, execve //bin/sh. Common on OpenWrt/MIPSEL routers. Output is raw bytes not a command string. !/usr/bin/env python3 -- coding: utf-8 -- Linux/MIPS LE reverse TCP + dup2 + execve"//bin/sh" — based on public shellcode by rigan...

OpenWrt / BusyBox Network Recon

Enumerate interfaces, routes, ARP/neighbors, DNS, and listening sockets on an embedded Linux shell for LAN/WAN pivot planning. !/usr/bin/env python3 -- coding: utf-8 -- """Network / pivot recon for OpenWrt / BusyBox shells.""" from kittysploit import from lib.post.linux.session import...

Adaptive Reverse TCP Listener

Reverse TCP listener that probes OS on connect and auto-upgrades Unix shells to PTY. Windows stays in line mode. !/usr/bin/env python3 -- coding: utf-8 -- """Adaptive reverse TCP listener. Detects OS on connect, attempts Unix PTY upgrade, stamps session metadata so classicshell / post modules can...

porterminal v1.0.7

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

wp2shell-ultimate

wp2shell-poc Independent proof-of-concept for the unauthentic...

porterminal v1.0.6

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

CVE-2026-67308

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

CVE-2026-67308

Concretely documented CVE-2026-67308 affects Wazuh workflows prior to 44bf114. A shell injection exists in GitHub Actions workflows via fork pull requests that submit crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly interpolated in...

CVE-2026-67308

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

EUVD-2026-51853

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

Malicious code in telerape (PyPI)

Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-telerape...