CVE-2026-121751

A flaw was found in Node Version Manager nvm. Remote version data retrieved from a mirror is stored without sufficient validation and later evaluated during shell arithmetic operations. An attacker controlling a malicious or compromised mirror can provide crafted version strings that trigger...

CVE-2026-113663

The AG2 open-source AgentOS contains a vulnerability in SandboxShellTool configurations (versions 0.13.2 until 1.1.1; autogen 0.13.2 to 0.14.1) when using allowed=[...] or readonly=True. The ShellAdapter._filter and contains_shell_operator functions in ag2/tools/sandbox/filter.py and ag2/tools/sa...

ShellShockHunter

ShellShockHunter v1.0 It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a famil...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

CVE-2026-109429

A flaw was found in mistral-vibe. This vulnerability allows an attacker to bypass command permission security checks, leading to arbitrary command execution. By embedding command substitutions inside variables that are evaluated using Bash prompt-transform operators, malicious commands can evade...

CVE-2026-103038

A flaw was found in PingTools. The application incorporates arbitrary input from the Host field of a Watcher Internet Control Message Protocol ICMP service directly into a system shell command without adequate sanitization. A local attacker can exploit this vulnerability to execute arbitrary...

CVE-2026-102697

A flaw was found in Ollama. The experimental agent mode fails to properly parse shell syntax within its command approval mechanism. An attacker capable of manipulating model output through prompt injection can append shell control operators to approved commands. This flaw allows the attacker to...

CVE-2026-113644

A flaw was found in iofogctl. The command-line utility fails to properly sanitize provisioning keys and certificate data returned by the Controller API before appending them into shell commands executed on agent systems over Secure Shell SSH. An attacker capable of altering or spoofing Controller...

CVE-2026-110641

A flaw was found in @runnerty/executor-decompress. An attacker can achieve arbitrary command execution by supplying a crafted archive file name containing shell metacharacters to a monitored directory. Because the application fails to properly sanitize file names before passing them to the system...

CVE-2026-120091

A flaw was found in Temporal Server, where the Kubernetes compute provider within the Worker Service constructs its client directly from user-supplied requests rather than trusted operator configurations. An authenticated remote user with read access to a namespace can exploit this vulnerability ...

CVE-2026-119282

A flaw was found in Nx. The project-graph analyzers in the Maven and Gradle plugins interpolate workspace configuration options directly into shell command arguments without adequate sanitization. An attacker who convinces a user to run Nx within a malicious repository or pull request can exploit...

Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Platypus.js Auth Bypass Command Execution

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2026-123014

iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the privileges of the logged-in user by inducing the user to open a crafted URL in iTerm2. Percent-encoded NUL characters survive input...

CVE-2026-123014

iTerm2 before 3.7.7beta2 has an argument injection vulnerability in the x-man-page: URL handler, allowing an attacker to execute arbitrary commands with the privileges of the logged-in user by inducing the user to open a crafted URL in iTerm2. Percent-encoded NUL characters survive input...

CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python exploit script for CVE-2021-3129, a remote code execution vulnerability in Laravel when the Ignition package is installed. This vulnerability allows an attacker to execute arbitrary system commands via PHAR deserialization. Features...

CVE-2026-82033

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different OS user, to reach unauthenticated session methods...

EUVD-2026-117046

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different OS user, to reach unauthenticated session methods...

git-clean-filter

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The filter..clean directive in .git/config points at a script and .gitattributes binds that filter to a tracked file. Whenever git renders a real git diff of that file it runs the worktre...