Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection

The SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway is vulnerable to command injection. id: CVE-2023-41109 info: name: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway - Command Injection author: princechaddha severity: critical description: | The SmartNode SN200 Analog...

XStream <1.4.6/1.4.10 - Remote Code Execution

Xstream API before 1.4.6 and 1.4.10 is susceptible to remote code execution. If the security framework has not been initialized, an attacker can run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. This can allow an attacker to...

Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection

Nortek Linear eMerge E3-Series devices before 0.32-08f are susceptible to remote command injection via ReaderNo. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. NOTE: this...

YeaLink DM 3.6.0.20 - Remote Command Injection

Yealink Device Management DM 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. id: CVE-2021-27561 info: name: YeaLink DM 3.6.0.20 - Remote Command Injection author: shifacyclewala,hackergautam severity: critical description: Yealink...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

HuangDou UTCMS V9 - OS Command Injection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

Jenkins - Remote Command Injection

Jenkins 2.153 and earlier and LTS 2.138.3 and earlier are susceptible to a remote command injection via stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this wa...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634는 pwfeedback이 sudoers 파일에서 활성화된 경우 Sudo 버전 buf if writefd, "\b \b", 3 == -1 break; --cp; left = bufsiz; continue; // ... cp++ = c; // ... 기본적으로 sudo-term-kill 문자가 있을 때 쓰기 작업이 실패하면 버퍼 포인터는 감소하지 않지만 쓸 수 있는 문자 수는 재설정되어,...

CVE-2026-23111

cve-id ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 허가된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 구성 공인된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below 가상 환경 생성 python -m venv venv 가상 환경 활성화 macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate 사용 예시: 의존성 설치...

CVE-2026-4020

cve-id ⚡ 간단한 사용법 이 프로젝트는 안전하고 허가된 환경에서만 사용하십시오. 예: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 설정 허가된 침투 테스트 환경 예제 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL sour...

mcpjam-to-root

⚠️ 고지 사항 이 저장소는 공인된 보안 연구, 침투 테스트 및 교육 목적으로만 사용됩니다. 명시적인 승인 없이 여기에 설명된 기술을 시스템에 사용하지 마십시오. ⚡ MCPJam → Root MCPJam Inspector RCE에서 root까지 — CVE-2026-23744, JupyterLab 토큰 노출, 커널 실행 및 OPSMCP 권한 상승. --- 📖 개요 이 저장소는 노출된 MCPJam Inspector 인스턴스에서 root 수준 접근 까지 이어지는 완전한 Linux 공격 체인을 문서화합니다. 이 체인은 개발자 도구,...

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

Next.js CVE-2025-29927 Vulnerability Scanner A command-line security scanner for identifying publicly accessible Next.js applications that may be exposed to CVE-2025-29927. Disclaimer This tool is intended for authorized security testing, vulnerability assessment, research, and defensive security...

CVE-2026-3891

Pix for WooCommerce --command --timeout --useragent 인터...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

CVE-2026-0542

cve-id ⚡ 간단한 사용법 이 프로젝트는 안전하고 승인된 환경에서만 사용하세요. 예를 들어: 로컬 가상 머신 Docker 컨테이너 격리된 실험실 환경 승인된 침투 테스트 환경 예제 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL...

CVE-2026-39987

cve-id ⚡ 簡単な使い方 このプロジェクトは、安全かつ許可された環境でのみ使用してください。例： ローカル仮想マシン Dockerコンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： git clone cd 使用例： Install dependencies Run the project 上記のコマンドを、実際のプロジェクトのセットアップ手順に置き換えてください。 クレジットまたは参考文献 url1 📚 教育用セキュリティ研究リポジトリ 管理された環境でサイバーセキュリティの概念を学習、テスト、研究するためのリポジトリです。 ⚠️...

vcsa-hardening-tool

Инструмент для усиления защиты и аудита VCSA Автоматизированный скрипт для усиления защиты приложения vCenter Server Appliance VCSA, предназначенный для обеспечения сетевой сегментации с нулевым доверием и глубокого криминалистического аудита. Этот инструмент предназначен для снижения критических...

CVE-2026-10795-Lab

CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC 인증 우회를 통한 플러그인 설치 연계 핵심 요약 이 저장소는 UpdraftPlus WordPress 플러그인의 UpdraftCentral 원격 통신 계층에 영향을 미치는 인증되지 않은 인증 우회 취약점인 CVE-2026-10795를 재현하고 검증하기 위한 로컬 Docker 랩입니다. 취약한 동작은 UpdraftCentral RPC 메시지 처리 흐름에 존재합니다. 취약한 버전에서는 위조된 format=1 RPC 메시지가 서명 검...