CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...

CVE-2026-112942

A flaw was found in launch-editor. This vulnerability can allow a remote attacker to achieve arbitrary command execution on Windows systems. By submitting a specially crafted file path containing line and column suffixes, an attacker can bypass file existence checks due to improper path validatio...

CVE-2026-113708

A flaw was found in Argo CD, where a crafted Kustomize remote base URL can inject options into a Git command run by the repo-server. This allows an attacker to execute arbitrary commands inside argocd-repo-server and read repository credentials and other data accessible to that process...

CVE-2026-113709

A flaw was found in Argo CD, where a Kustomize kustomization can point Helm at a repository-controlled directory and load a plugin that runs when Kustomize Helm rendering is enabled in the repo-server. This allows an attacker to execute arbitrary commands inside argocd-repo-server and read...

GHSA-R825-W8MM-5PXW launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

Summary launch-editor forwarded file paths directly to editors without sanitization. If a path resembles a CLI flag, editors like Vim may interpret it as a command, potentially causing unintended file overwrites or command execution. Impact Direct launch-editor users Only apps that match all of t...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

NPM: launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors vulnerability discovered by ? in WordPress Npm vite-plus versions = 1.0.0...

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

Summary launch-editor forwarded file paths directly to editors without sanitization. If a path resembles a CLI flag, editors like Vim may interpret it as a command, potentially causing unintended file overwrites or command execution. Impact Direct launch-editor users Only apps that match all of t...

CVE-2026-112944

A flaw was found in launch-editor. This vulnerability can lead to arbitrary command execution or unintended file overwrite due to improper handling of file paths when invoking external text editors. An attacker capable of creating files with leading special characters in the working directory can...

lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

CVE-2024-10914__POC

CVE-2024-10914 - Proof of Concept Exploit for command injection vulnerability in the /cgi-bin/accountmgr.cgi endpoint. This vulnerability allows arbitrary command execution on the affected system through unsanitized parameters. Vulnerability Description CVE-2024-10914 is a command injection...

phpggc

PHPGGC: PHP Generic Gadget Chains PHPGGC is a library of unserialize payloads along with a tool to generate them, from command line or programmatically. When encountering an unserialize on a website you don't have the code of, or simply when trying to build an exploit, this tool allows you to...

CVE-2026-112944

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944

The launch-editor Node.js package is vulnerable to argument injection prior to version 2.14.2 . When an attacker can create a filesystem entry starting with a plus (+) or minus (-) in the working directory, launchEditor may forward this path without forcing it to be interpreted as a positional fi...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

CVE-2026-112944 launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

EUVD-2026-105045

launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...

Test IT testing system Command Execution

The vulnerability of the Test IT testing system relates to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...