96 matches found
POC-CVE-2025-68613
説明 N8Nの認証済みRCE脆弱性CVE-2025-68613に対するPoCエクスプロイトコード 使用方法 python3 poc.py -u -c...
POC-CVE-2026-18729
설명 CVE-2026-18729에 대한 개념 증명PoC 익스플로잇 코드 사용법 python3 poc.py -url -uname -pword -c bash 명령어 없이 0으로 나누기 오류를 통한 코드 실행 증명 bash 명령어와 함께 참고: 엔드포인트가 컴포넌트 템플릿과 메타데이터만 반환하므로 bash 출력은 반환되지 않습니다. bash 출력은 빌드 범위 내의 out에 저장되며 JSON 응답으로 직렬화되지 않으므로, 명령 출력이 없다고 해서 명령이 실행되지 않았다는 의미는 아닙니다...
POC-CVE-2026-19286
Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...
POC-CVE-2026-10134
설명 CVE-2026-10134용 PoC 익스플로잇 코드 사용법 python3 poc.py -u -name -pwd -c...
POC-CVE-2026-0769
Description Proof of concept exploit code for CVE-2026-0769 Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stor...
POC-CVE-2026-0768
설명 CVE-2026-0768에 대한 개념 증명PoC 익스플로잇 코드 사용법 python3 poc.py -u -c...
POC-CVE-2026-5027
설명 CVE-2026-5027에 대한 개념 증명PoC 익스플로잇 코드 사용법 python3 poc.py -u -c -a "bash command arg Docker 컨테이너 디스크에 기록된 파일...
CVE-2022-1388
CVE-2022-1388 CVE-2022-1388 확인 및 익스플로잇 설치: python3 -m pip install -r requirements.txt 사용법 단일 : python3 cve.py s fullurl apicommand 예시 python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' 대량 : python3 cve.py m host list endpoint apicommand pool 예시 python...
PoC-CVE-2026-9198
설명 CVE-2026-9198에 대한 개념 증명 익스플로잇 코드 Exploit-DB 항목: https://www.exploit-db.com/exploits/52675 사용법 python3 poc.py -u -c...
Exploit for CVE-2026-18729
Description Proof of concept exploit code for CVE-2026-18729...
CVE-2026-73614: Interpretation Conflict
Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...
PYSEC-2026-424 Mlflow: Command Injection when serving models with enable_mlserver=True
A command injection vulnerability exists in Mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for command...
MAL-2026-5772 Malicious code in npx-whoami-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0971bcb88de070f17d932feff04cd6e66ecc825f606b412414457a3afb4ad174 The package's only code file index.js, also registered as the package's bin entry unconditionally executes require'childprocess'.execSync"bash -c...
Exploit for OS Command Injection in Gnu Bash
HackTheBox: Shocker Writeup A structured and professional walk...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...
CVE-2026-45152 uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution
uniget is a universal installer and updater for container tools. Prior to 0.27.1, a command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c. Because the check field is loaded directly from untrusted JSON metadata without...
Command Injection
uniget is vulnerable to Command Injection. The vulnerability is due to unsafe execution of the untrusted check field from metadata files through /bin/bash -c without proper validation or sanitization, which allows an attacker to execute arbitrary shell commands on the victim's system...
EUVD-2026-23292
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...
Snowflake Cortex Code CLI 安全漏洞
Snowflake Cortex Code CLI is an open-source command-line development tool provided by Snowflake. Versions of Snowflake Cortex Code CLI prior to 1.0.25 contained security vulnerabilities. These vulnerabilities were due to improper validation of bash commands, which could allow attackers to execute...