openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:21828-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21828-1 advisory. - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Tenable has extracted the preceding...

CVE-2026-11765

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

CVE-2026-11765 Argument Injection in TUBITAK BILGEM's Pardus Pen

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

EUVD-2026-76102

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

CVE-2026-11765 Argument Injection in TUBITAK BILGEM's Pardus Pen

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

CVE-2026-11765

CVE-2026-11765 is an argument injection vulnerability (improper neutralization of argument delimiters in a command) in TUBITAK BILGEM Pardus Pen , a Turkish Linux distribution. The issue affects versions before 4.2.1 , which is the recommended fix. The CVSS 3.1 score is 3.3 (LOW) with a local att...

CVE-2025-58098

CVE-2025-58098 exec cmd=... 指令（CVE-2025-58098）参数注入 实验 docker build -t cve-2025-58098-lab . docker run -it -p 8080:80 cve-2025-58098-lab 漏洞版本 修复版本...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI 参数注入漏洞（Windows "WorstFit"） 概述 CVE-2024-4577 是 Windows 上 PHP CGI 实现中的一个严重远程代码执行漏洞。它绕过了原始 CVE-2012-1823 的修复，利用了 Windows "最佳匹配"（Best-Fit）代码页转换功能，通过 CGI 查询字符串夹带命令行参数。 CVSS 评分： 9.8（严重） 发现者： Orange Tsai（DEVCORE） 类型： 操作系统命令注入 / 参数注入 补丁日期： 2024 年 6 月 6 日 技术细节 当 PHP 以 CGI...

CVE-2025-63821

CVE-2025-63821 提交者：Nicola Giuffrida 信息 厂商： TOTOLINK 厂商网站： TOTOLINK 型号： A720R 固件版本： V4.1.5cu.630B20250509 固件下载地址： TOTOLINK 严重性 CVSS v4.0 基础分：4.8（中等） 向量：CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N 漏洞详情 Validitycheck 函数对输入的净化不足，导致 setDiagnosisCfg 和 setTracerouteCfg 组件中存在参数注入。...

CIMCown

CIMCown CVE-2026-20200 Cisco IMC 中的参数注入与 RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 公告: NSIDE-SA-2026-003 博客文章:...

ansible-core security update

An update is available for ansible-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ansible is a radically simple model-driven configuration management,...

RLSA-2026:66248 Important: ansible-core security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

PHP_8.1.x_Exploit

🚀 PHP CVE 自动驾驶仪 自动检测和利用关键 PHP 漏洞 CVE-2024-4577 绕过, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh 是一个单文件、零配置 的安全评估工具，能够自动发现易受攻击的 PHP 端点，并利用影响 PHP 8.1.34 之前版本 （2024 年 12 月发布）的四个高危 CVE 。它无需手工构建载荷 ——只需提供一个 URL，脚本会自动完成从爬取到远程代码执行的全部工作。完全自动驾驶模式 ——无需用户提示即可自动检测和利用。 特性 完全自主的自动驾驶模式 – 给定一...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI 远程代码执行 RCE 漏洞利用工具 一个基于 Python 的 CVE-2012-1823 漏洞利用工具。该漏洞允许攻击者在运行存在漏洞的 PHP-CGI 版本的服务器上，通过查询字符串注入命令行参数来执行任意代码。 📝 漏洞概述 当 PHP 以 CGI 模式运行时，存在此缺陷。HTTP 查询字符串被错误地解析为 PHP 二进制文件的命令行参数。通过传递 -d 参数，我们可以覆盖 PHP 配置指令。 本利用工具使用的关键指令： allowurlinclude=1：启用数据流包含。 autoprependfile=php://input：强制...

Security update for ansible-core (important)

openSUSE security update: security update for ansible-core ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21828-1 Rating: important References: bsc1272369 Cross-References: CVE-2026-11332 CVE-2026-16493 CVSS scores: CVE-2026-11332 SUSE : 7.8...

PT-2026-89867

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

RockyLinux 8 : ansible-core (RLSA-2026:66248)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66248 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

EcoStruxure IT Data Center Expert < 9.1.2 Multiple Vulnerabilities (SEVD-2026-251-01)

The version of EcoStruxure IT Data Center Expert installed on the remote host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SEVD-2026-251-01 advisory. - CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized...

OPENSUSE-SU-2026:21828-1 Security update for ansible-core

This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369...

AlmaLinux 8 : ansible-core (ALSA-2026:66248)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66248 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...