CVE-2026-102794

A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2026-102793

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function settimezone of the file /api/ZRFirmware/settimezone. This manipulation of the argument hostname/zonename causes command injection. It is possible to initiate the attack remotely. The exploit has been...

EnvVisualizer

EnvVisualizer . . . \ / \ \ / /|| | | || | / \ / /\ Y / | |/ / | \ \ | | | \ // \ \ | \ | \ / \ / | |\ | | // | || |/ /\ /| | / / /| // / |/ / /// \ | / / / / / / Parse, categorize, and visualize/proc/self/environ on compromised Linux machines. Turn a wall of fused environment variable...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

CVE-2022-36446-Webmin-Software-Package-Updates-RCE

Un script de Python para explotar CVE-2022-36446 Software Package Updates RCE Authenticated en Webmin 1.997. Características Soporta HTTP y HTTPS incluso con certificados autofirmados con --insecure. Ejecución de un solo comando con la opción --command. Consola interactiva con la opción...

msprobe

msprobe 关于 安装 使用方法 示例 即将推出 致谢 关于 发现所有本地部署的微软产品，用于密码喷洒和枚举。 该工具将使用与目标根域名相关的常见子域名列表，尝试发现有效的本地部署微软解决方案实例。以下是工具运行时的截图： 安装 使用 pipx 安装该项目 pipx install git+https://github.com/puzzlepeaches/msprobe.git 使用方法 该工具包含四个不同的模块，用于协助发现本地部署的微软产品： Exchange RD Web ADFS Skype for Business 帮助菜单和支持的模块如下所示： Usage: msprob...

Jboss_JMXInvokerServlet_Deserialization_RCE

JbossJMXInvokerServletDeserializationRCE Uso de Burp Suite para explotar la vulnerabilidad de deserialización de Java 0x01 Montar la vulnerabilidad de deserialización de Jboss JMXInvokerServlet Entorno de prueba: Vulnerabilidad de deserialización de JBoss JMXInvokerServlet Principio de la...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

cve-2019-3396

Inyección de plantilla no autorizada en Confluence CVE-2019-3396 I Construcción Este error ocurre en las versiones: Todas las versiones 1.x.x, 2.x.x, 3.x.x, 4.x.x y 5.x.x Todas las versiones 6.0.x, 6.1.x, 6.2.x, 6.3.x, 6.4.x y 6.5.x Todas las versiones 6.6.x anteriores a 6.6.12 Todas las versione...

cve-2024-52005-poc

CVE-2024-52005: ANSI Escape Sequence Injection in Git Overview This repository contains a Proof-of-Concept PoC demonstrating CVE-2024-52005, a vulnerability in Git that allows ANSI escape sequence injection through the sideband channel during Git operations. CVE-2024-52005 is a High severity CVSS...

The vulnerability of the command-line interface (CLI) of TP-Link Archer NX200, NX210, NX500, and NX600 Wi-Fi routers allows attackers to bypass existing security restrictions and execute arbitrary commands.

The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...

CVE-2026-51870

DeepTutor v1.4.0 is vulnerable to command execution due to a flaw in the /tutorbot/agent/tools/shell.py:ExecTool.execute component. While the documents confirm the existence of this vulnerability and provide a sighting link, they do not specify the root cause, practical consequences, or a remedia...

CVE-2026-51858

The camel-ai camel framework versions v0.2.91a1 , v0.2.91a2 , and v0.2.91a3 are vulnerable to unauthorized command execution. Specifically, the TerminalToolkit.shell_exec function allows for prompt-driven shell command execution because it lacks an approval boundary . This flaw enables an attacke...

The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software allows a hacker to execute arbitrary commands.

The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...

The vulnerability of the dnsmasq module in the microprogramming-based router software from TP-Link Archer AX53 allows a hacker to execute arbitrary commands.

The vulnerability of the dnsmasq module in the microprogramming-based routing software for TP-Link Archer AX53 relates to the failure to take measures to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2026-51870

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute...

Linux Distros Unpatched Vulnerability : CVE-2026-102371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the...

EUVD-2026-90422

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

AlmaLinux 8 : postgresql:15 (ALSA-2026:69923)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69923 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...

RHEL 9 : vim (RHSA-2026:72466)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72466 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary Code Execution via crafted directo...