CVE-2026-58138

CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....

CVE-2026-90868

An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations...

CVE-2026-90863

Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...

CVE-2026-90865

An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...

EUVD-2026-113025

An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations...

CVE-2026-90868 OS Command Injection in Progress WS_FTP Server

An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations...

CVE-2026-90868

Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4 is vulnerable to an OS command injection vulnerability. This flaw allows for arbitrary command execution under certain configurations. The vulnerability is associated with CWE-78 (Improper Neutralization of Special...

CVE-2026-90865

Progress Software WS_FTP Server on Windows is vulnerable to an OS command injection vulnerability in versions prior to 2024.0.7 and 2025.0.4 . The flaw exists in FTP Notification Variables , which could allow an attacker to execute arbitrary commands with elevated privileges under specific config...

EUVD-2026-113022

An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...

CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager

Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...

CVE-2026-90863

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows are vulnerable to a missing authorization flaw in the administrative interface. This flaw could allow a delegated Host Administrator to exceed their authorized scope, potentially leading to arbitrary command execut...

EUVD-2026-113020

Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads: Payload|...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialization Command Execution Vulnerability CVE-2018-1297 Apache JMeter is an open-source software suite written in Java by the American Apache Software Foundation for stress testing and performance testing. Versions 2.x and 3.x contain a deserialization vulnerability that allows a...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...

CVE-2024-9474

Palo Alto PAN-OS Exploit PoC - CVE-2024-0012 & CVE-2024-9474 This script is a Proof of Concept PoC exploit for vulnerabilities found in Palo Alto PAN-OS CVE-2024-0012 & CVE-2024-9474. The script can be used to either scan a list of URLs for the vulnerability or exploit a single vulnerable URL...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

CVE-2014-6271

EXPLOIT FOR CVE-2014-6271 USAGE : CVE-2014-6271.py full path to target uri command...

CVE-2026-118905 nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.2 through 0.40.5, nvmls filters installed versions with a sed program that embeds the requested version pattern in a ... address, escaping . and, since 0.40.4, but not backslash. ...