EUVD-2026-93889

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

CVE-2024-10914__POC

CVE-2024-10914 - 개념 증명 /cgi-bin/accountmgr.cgi 엔드포인트의 명령어 주입 취약점을 위한 익스플로잇입니다. 이 취약점은 비위생화된 매개변수를 통해 영향을 받는 시스템에서 임의의 명령어를 실행할 수 있게 합니다. 취약점 설명 CVE-2024-10914는 CGI 웹 인터페이스가 있는 장치에 영향을 미치는 명령어 주입 취약점입니다. 취약한 애플리케이션은 cgiuseradd 요청에서 name 매개변수를 올바르게 검증하지 않아 공격자가 애플리케이션 권한으로 실행될 시스템 명령어를 주입할 수 있습니다. ...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

RLSA-2026:75769 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

USN-8874-1: sg3_utils vulnerability

Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...

CVE-2026-105744

A flaw was found in docling. When configured to process LaTeX documents using the Tectonic engine, the application does not restrict TeX file operations during compilation. An attacker could exploit this vulnerability by submitting crafted document input to read sensitive files or overwrite...

PT-2026-107118

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description Critical infrastructure settings, specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin, are exposed through the web UI and A...

RockyLinux 10 : vim (RLSA-2026:75769)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75769 advisory. vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 Tenable has extracted the preceding description block directly...

AlmaLinux 10 : vim (ALSA-2026:75769)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75769 advisory. vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 Tenable has extracted the preceding description block directly fr...

RHEL 9 : vim (RHSA-2026:75768)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:75768 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in ...

EUVD-2026-89332

simple-git allows command execution through unblocked Git configuration includes...

GHSA-W2VW-W76X-QR89 Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb バージョン 6.1.2.0 以下には、Notification Settings 機能にリモートコード実行 RCE の脆弱性が存在します。ASWeb で「システム設定」権限を持つ認証済み攻撃者は、この欠陥を悪用してサーバー上で任意のコマンドを実行し、システム全体を完全に侵害する可能性があります。 要件 攻撃を成功させるには、攻撃者には以下が必要です: バージョン 6.1.2.0 以下の GV-ASManager Web アプリケーションへのネットワークアクセス; 通知設定...

CVE-2007-2447

CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3은 원격 명령 주입 취약점CVE-2007-2447에 영향을 받으며, 원격 공격자가 셸 메타 문자를 포함하는 사용자 이름을 지정하여 임의의 명령을 실행할 수 있도록 허용합니다...

evil-rmi-server

evil-rmi-server 임의의 명령을 실행할 수 있는 악성 RMI 서버입니다. 로컬 권한 상승privesc 시나리오에서 CVE-2021-44228에 유용할 수 있습니다. 빌드 ./gradlew bootJar 실행 Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil RMI Server to help construct and run an arbitrary command. The Command to run. Wrap in quotes if the...

CVE-2021-3317

정보 익스플로잇 제목: Klog Server 2.4.1 - 명령 삽입 인증 필요 날짜: 2021.01.26 익스플로잇 제작자: Metin Yunus Kandemir 공급업체 홈페이지: https://www.klogserver.com/ 버전: 2.4.1 설명: https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection CVE: 2021-3317 사용 방법 python3 PoC.py --target 10.10.56.51 --username admi...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails 웹 콘솔 RCE 이것은 무엇인가요? 이것은 Metasploit용 metasploit 모듈입니다. 이미 이 모듈을 가지고 있습니다. 네, 이 모듈은 metasploit에 포함되어 있습니다. 하지만 그 모듈로는 임의 명령 실행을 할 수 없습니다. 즉, 그 모듈로는 리버스/바인드 셸 페이로드만 설정할 수 있습니다. 저는 셸에서 직접 명령을 실행할 필요가 있었습니다. 그래서 metasploit 모듈을 수정하여 시스템에서 단일 명령을 실행할 수 있게 했습니다. 좋습니다. 어떻게 사용하나...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...