Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Platypus.js Auth Bypass Command Execution

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

git-clean-filter

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The filter..clean directive in .git/config points at a script and .gitattributes binds that filter to a tracked file. Whenever git renders a real git diff of that file it runs the worktre...

CVE-2021-3129

CVE-2021-3129 Laravel Ignition RCE Exploit This is a Python exploit script for CVE-2021-3129, a remote code execution vulnerability in Laravel when the Ignition package is installed. This vulnerability allows an attacker to execute arbitrary system commands via PHAR deserialization. Features...

EUVD-2026-116533

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

CVE-2026-118865

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2026-118865

An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of the Archer AX3000 v2 . The issue occurs because the software fails to properly neutralize shell metacharacters in a crafted path value before passing it to a system command whe...

CVE-2026-121621

A command injection vulnerability exists in Argo CD Image Updater . The flaw occurs because a proxy URL configured for an SSH Git repository is passed unsanitized into a shell-interpreted SSH command. An attacker capable of setting a malicious proxy value can inject shell metacharacters to execut...

ShellShockHunter

ShellShockHunter v1.0 It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a famil...

ZeroDay vulnerabilities are exploited in Ivanti Connect Secure.

Ivanti has identified a vulnerability in Connect Secure. A malicious actor could exploit this vulnerability to execute arbitrary commands on the vulnerable system without any authentication. Ivanti reports being aware of reports that this vulnerability has been exploited as a ZeroDay vulnerabilit...

EUVD-2026-115641

Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...

HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer

Potential Security Impact: Local: Access Restriction Bypass, Denial of Service DoS, Disclosure of Information, Elevation of Privilege, Unauthenticated Disclosure of Information, Unauthorized Read Access to Files, Unauthorized Write Access to the File System; Remote: Arbitrary Command Execution,...

CVE-2026-120091

Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...

CVE-2026-120091 Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...

CVE-2026-120091

Temporal Server is vulnerable to OS command injection because the k8s compute provider (part of the go.temporal.io/auto-scaled-workers module) builds a Kubernetes client using caller-supplied configuration instead of operator configuration. An authenticated caller with only a read role in a singl...

CVE-2026-120091

Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...

CVE-2026-120091 Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...

SUSE CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy ... TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, wher...