CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.8 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 0.1.0 commit 48b2933 Advisory : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

CVE-2026-42208_lab

Inyección SQL en LiteLLM Proxy GHSA-r75f-5x8p-qvmc Un entorno de reproducción para la vulnerabilidad de inyección SQL en el flujo de autenticación de claves API de LiteLLM Proxy. Resumen de la vulnerabilidad...

CVE-2022-42889-POC

CVE-2022-42889-POC 一个简单的演示应用程序，展示了如何利用CVE-2022-42889漏洞。 利用OOB（带外）服务来演示dns和url前缀。 JavaDocs for commons-text interpolation commons-text JavaDocs 插值示例 script:javascript "$script:javascript:java.lang.Runtime.getRuntime.exec'touch /tmp/blop'" dns "$dns:address|HOST" url "$url:UTF-8:http://HOST" 来自...

CVE-2022-42889-text4shell

CVE-2022-42889 又名 text4shell 针对最近由 @pwntester 发现的 Apache Commons Text 漏洞 的概念验证（PoC）： 正如 https://www.rapid7.com/blog/post/2022/10/17/cve-2022-42889-keep-calm-and-stop-saying-4shell/ 中所述： 该漏洞存在于 StringSubstitutor 插值器对象中。插值器由 StringSubstitutor.createInterpolator 方法创建，并允许按 StringLookupFactory...

CVE-2022-42889-PoC

CVE-2022-42889 PoC This is Proof of Concept for the vulnerability CVE-2022-42889. This code will run the JavaScript code 195 + 324. If vulnerable the output should be: root@kitploit: PoC Output: 519 In order to run this you will need: JDK 11 or above Maven When prompted for an exploit string, you...

Text4shell--Automated-exploit---CVE-2022-42889

Install maven - maven-linux //自动黑客入侵: 1../install.sh root@kitploit: 2../exploit.sh 3.To remove the application use ./stopapp.sh //手动黑客入侵: 1. 使用Maven安装以创建fat jar root@kitploit: mvn clean install 2. Docker构建 root@kitploit: docker build --tag=text4shell . 3. Docker运行 root@kitploit: docker run -p...

CVE-2026-45694 LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters

LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...

CVE-2026-45694

LibreNMS (network monitoring system) is affected by a reflected XSS in the Proxmox application view (versions up to 26.4.0 ). The root cause is in LegacyController.php:75, where the page title is injected into a document.title JavaScript assignment via string interpolation. The instance and vmid ...

CVE-2026-58474 whichllm < 0.5.16 Code Injection via run and snippet commands

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

CVE-2026-58474

whichllm before version 0.5.16 contains a code injection vulnerability in the run and snippet commands. The script generation function in cli.py interpolates HuggingFace-derived values—including GGUF variant filenames from the Hub API siblings rfilename field—directly into Python source code with...

riskootext4shell

riskootext4shell text4shell script for text coomons =1.10 CVE-2022-33980 A biblioteca Apache Commons Text é uma biblioteca alternativa às funcionalidades nativas do JDK do Java. Versões anteriores à versão 1.10.0 do Apache Commons Similar ao CVE-2022-33980 root@kitploit: python3 text4shell.py -u...

commons-text-goat

Commons-Text Goat Dies ist eine Web-App, die absichtlich anfällig für CVE-2022-42889 ist. Es verwendet einen eingebetteten Jetty-Server und Maven, um einen Servlet zu starten, der auf Port 8080 unter der URL \api lauscht. Dieser Endpunkt akzeptiert einen URL-Parameter cmd. Dieser wird zwischen $...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: iniezione di comandi del sistema operativo tramite runnmapscan Lo strumento MCP runnmapscan costruisce il proprio comando interpolando come stringa i parametri target e additionalFlags e lo esegue tramite childprocess.exec, cioè /bin/sh -c. ⚠ Leggi prima —...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 Per trovare la documentazione completa sulla configurazione e ricreazione dell'exploit, consultare il file "CVE-2022-42889-Project Vulnerability Exploitation Report". La macchina virtuale utilizzata per costruire ed eseguire l'exploit non è inclusa in questo repository. Setu...

PT-2026-76558

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 26.5.0 Description The Proxmox application view contains a reflected cross-site scripting issue. The application fails to adequately encode the instance and vmid GET parameters before reflecting them into the page...

CVE-2026-59859

Kiota’s PHP generator (prior to 1.32.4) embeds OpenAPI-derived strings directly into PHP double-quoted literals via SanitizeDoubleQuote(), without escaping $. This permits attacker-controlled interpolation constructs like ${…}, $var, or {$obj-&gt;prop} to inject arbitrary PHP code into generated ...

CVE-2026-61444

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agentsfile parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen...

CVE-2026-61444

PRAISONAi before 4.6.78 has a code‑injection vulnerability in deploy/api.py: the agents_file parameter is interpolated into an f-string without sanitization, allowing arbitrary Python code execution when the generated server code runs via subprocess.Popen(). Affected: PraisonAI

perl-IO-Compress security update

2.081-2 - Remove use of eval in File::GlobMapper for safer string interpolation - Resolves: RHEL-180411...

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation

Vulnerability Details CWE: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic All 66+ CQL queries in internal/storage/db/cassandradb/ use fmt.Sprintf to interpolate user-controlled values directly into CQL query strings without parameterization. Unauthenticated endpoints...