CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

CVE-2021-4034

CVE-2021-4034 — PwnKit Local Privilege Escalation · Master's Thesis Research -orange Memory corruption vulnerability in polkit's pkexec utility Local Privilege Escalation → root via out-of-bounds write Affected: polkit 0.105-31 and earlier · Patch: polkit 0.105-33 January 2022 Interactive root...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI Remote Code Execution RCE Exploit A Python-based exploit for CVE-2012-1823. This vulnerability allows an attacker to execute arbitrary code on a server running a vulnerable version of PHP-CGI by injecting command-line arguments via the query string. 📝 Vulnerability Overvie...

CVE-2025-24893-POC

CVE-2025-24893-POC A POC for CVE-2025-24893 written in python Usage python3 -u the url...

CVE-2026-30225-OliveTin-RCE

OliveTin — выполнение действий без аутентификации → RCE + CVE-2026-30225 PoC для повышения привилегий / удалённого выполнения кода против экземпляров OliveTin, работающих с поставляемыми настройками гостевого доступа по умолчанию. Проверено на OliveTin 3000.10.0, работающем от root HTB: Enigma, г...

CVE-2026-24061

CVE-2026-24061 - telnetd 인증 우회 개요 GNU InetUtils의 telnetd에서 발생하는 argument injection 취약점입니다. 영향받는 버전은 1.9.3부터 2.7까지이며, CVSS 점수는 9.8입니다. 2026년 1월 26일부터 CISA KEV 목록에 등재되어 실제 야생에서 활발히 악용되고 있습니다. 핵심 트릭은 telnetd가 NEW-ENVIRONRFC 1572을 통해 클라이언트로부터 환경 변수 USER 값을 받아 검증 없이 그대로 login1 호출에 삽입한다는 점입니다. 클라이언트가...

CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – PoC внедрения аргументов / OS-инъекции в Cybersecurity AI CAI Framework Автор: Mohammed Idrees Banyamer Страна: Иордания GitHub: https://github.com/yourusername Instagram: @banyamersecurity Обзор Этот репозиторий содержит Proof of Concept PoC, демонстрирующий уязвимость внедрения...

CVE-2026-97662

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-4660-PoC

CVE-2026-4660 PoC Proof of concept для CVE-2026-4660 уведомление HashiCorp в hashicorp/go-getter. Я — автор первоначального сообщения. Злоумышленник публикует Terraform-модуль с ref вида --pathspec-from-file=/path/to/file. Когда жертва запускает terraform init, go-getter клонирует репозиторий и...

CVE-2026-97662

The AWS security-agent-mcp-server (versions before 0.2.0 ) is vulnerable to an argument injection issue within the diff scan operation . A threat actor can provide a crafted reference value to this operation, potentially allowing them to create, overwrite, or truncate arbitrary files on the host ...

EUVD-2026-90975

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Code Analysis Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Field| Detail ---|--- CVE ID| CVE-2026-4631 GHSA| GHSA-m4gv-x78h-3427 Severity| Critical CVSS 9.8 Affected versions| Cockpit 327 – 359 Fixed in| Cockpit 360 CWE| CWE-78: OS Command...

CVE-2026-24061

CVE-2026-24061: GNU InetUtils telnetd Authentication Bypass - Deep Dive Analysis Executive Summary CVE-2026-24061 is a critical CVSS 9.8 remote authentication bypass vulnerability in GNU InetUtils telnetd that allows unauthenticated attackers to gain instant root access. The vulnerability stems...

Weblate-CVE-2026-24126

Weblate — Arbitrary File Read via SSH Host Argument Injection Discovered by: Alejandro Baño · January 2026 Acknowledged by: Weblate 5.16 release notes Overview Weblate's SSH host key management endpoint passes the host parameter supplied by an authenticated administrator directly tossh-keyscan...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

CVE-2026-24061

CVE-2026-24061 - Telnet Argument Injection Nuclei template for detecting the CVE-2026-24061 vulnerability in GNU inetutils telnetd, allowing root access without authentication. 📋 Vulnerability Description CVE-2026-24061 is a critical argument injection vulnerability in GNU inetutils telnetd that...

PYSEC-2026-4055 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

CVE-2026-24061-POC

CVE-2026-24061 Vulnerable Lab ⚠️ WARNING : Intentionally vulnerable environment. Do NOT expose to untrusted networks. Overview Vulnerable GNU InetUtils telnetd v2.5 for testing CVE-2026-24061 - authentication bypass via argument injection. Quick Start Build sudo docker compose up -d Test...