ncrack

!IMPORTANT Ncrack was written as a "Google Summer of Code" Project in 2009. While it was useful for some purposes, it is not fully developed or currently maintained. The code has some known and probably unknown security issues. We recommend the brute force scripts included as part of Nmap's...

CVE-2020-17530

OGNL Injection Exploit Summary Simple Python script to exploit OGNL injection vulnerabilities in Apache Struts2/Tomcat and execute system commands. Usage pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...

EUVD-2026-125271

Unauthorization vulnerability in the management of workflow definitions in OpenKM Community Edition. The REST endpoints registerProcessDefinition and runProcessDefinition require authentication but do not verify roles in the WorkflowService or in lower layers. An attacker with the ROLEUSER role c...

CraftCMS-CVE-2026-79987

CraftCMS CVE-2026-79987 — Authenticated RCE Public PoC for CVE-2026-79987 Craft CMS: a Control Panel user with only the accessCp permission can execute operating-system commands as the PHP web worker, via ElementSearchController::actionSearch accepting criteria.with.when — Craft copies it into...

CVE-2020-12641

CVE-2020-12641: Command Injection via “imconvertpath” Parameter in Roundcube Webmail A Command Injection vulnerability exists in Roundcube versions before 1.4.4, 1.3.11 and 1.2.10. Because the "imconvertpath" does not perform sanitization/input filtering, an attacker with access to the Roundcube...

convoC2

convoC2 Table of Contents Introduction Demo Usage Requirements Inspiration Contribute Introduction Command and Control infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams. It infiltrates data into hidden span tags in Microsoft Teams...

CVE-2026-33017-Langflow-RCE

CVE-2026-33017 - Langflow RCE Vulnerability xpl0ited by infrar3d This proof‑of‑concept exploit targets a critical Remote Code Execution RCE vulnerability in Langflow versions prior to 1.9.0. The vulnerability allows unauthenticated attackers to execute arbitrary system commands by injecting...

CVE-2026-76965

SAP NetWeaver Application Server ABAP and ABAP Platform are vulnerable to an OS command injection due to insufficient authorization checks on certain internal functionalities. An attacker with low privileges can exploit this flaw to execute arbitrary commands on the underlying host. Successful ex...

CVE-2026-76965 OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

EUVD-2026-120657

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

CVE-2026-76965: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain…

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

PT-2026-141276

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description Insufficient authorization checks for certain internal functionality allow an attacker with low privileges to execute arbitrary operating syste...

EUVD-2026-118496

fast-agent: fast-agent serve binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution...

CVE-2026-15266

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host...

CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host...

EUVD-2026-119668

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host...

CVE-2026-15266

IBM Concert versions 1.0 through 3.0.1.1 contain components vulnerable to unsafe command execution (CWE-78). This flaw allows an attacker to execute arbitrary system commands on the host machine. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.8 , indicating a high impact on con...

PT-2026-140100

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host...

CVE-2026-102610

fast-agent is a framework for building, running, and evaluating AI agents with Model Context Protocol support. Prior to 0.7.21, fast-agent serve uses HTTP transport bound to 0.0.0.0 on port 8000 without authentication, allowing any network client that can reach the /mcp endpoint to invoke the...

CVE-2026-102610

The fast-agent framework (prior to version 0.7.21 ) is vulnerable to unauthenticated access because the fast-agent serve command binds to 0.0.0.0 on port 8000 without authentication. Any network client reaching the /mcp endpoint can invoke exposed agent tools. If started with the --shell flag, an...