CVE-2026-45449

The Unitronics UniStream Pro/UniLogic systems are vulnerable to an OS Command Injection (CWE-78) vulnerability. This flaw is caused by the improper neutralization of special elements used in an OS command. The issue specifically affects Unitronics UniStream Pro versions only (B10 / C10) and UniLo...

CVE-2026-45449 Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

CVE-2026-23500

CVE-2026-23500: OS Command Injection RCE via MAINODTASPDF configuration in Dolibarr Overview Field| Details ---|--- CVE ID| CVE-2026-23500 Severity| CRITICAL Advisory| GHSA-w5j3-8fcr-h87w Discovered by| Lukasz Rybak Affected Products Dolibarr/dolibarr versions: = 22.0.4 Patched in: 23.0 CWE...

CVE-2026-110957

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...

CVE-2026-104586

AUTOM8N WHM/cPanel plugin through commit 82821f7 contains an OS Command Injection in borgrestore.cgi...

CVE-2023-38743

CVE-2023-38743 ManageEngine ADManager Command Injection Ref: https://medium.com/@petrusviet/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe https://www.zerodayinitiative.com/advisories/ZDI-23-1488/...

CVE-2018-8097

CVE-2018-8097 PoC This is a simple python Proof of Concept script demonstrating the CVE-2018-8097, affecting the PyEve library for versions 0.7.5 Usage usage: cve20188097.py -h -u URL -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Target URL where you can use the...

cve-2021-31630

This script automatically exploits vulnerability in OpenPLC Web Server v3 You will be able to create an automatic Rever Shell with the server without having to use manual techniques. CVE-2021-31630 Detail Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code...

Turvan6rkus-CVE-2024-3273

🛠️ D-Link Network Storage Devices Command Injection 🌟 Background D-Link Network Attached Storage NAS device is a hard drive or drives device connected to a computer network for file storage and sharing. Unlike a regular external hard drive that is directly interfaced with a computer, a NAS device...

cve-2017-5123

CVE-2017-5123 This repository contains a demonstration of CVE-2017-5123 , an ICMP command-and-control backdoor, and a CWE-78 OS Command Injection vulnerable web app. Part of CSC 4308 - Challenge 3. Prerequisites Linux Kernel : 4.13 up to but excluding 4.13.7 Node.js : 10.x npm : 6.x Overview This...

CVE-2025-11953-POC-

CVE-2025-11953 - React Native CLI RCE Research Environment 📋 Overview CVE-2025-11953 is a critical Remote Code Execution RCE vulnerability in the React Native CLI's Metro development server discovered by JFrog Security. This research environment provides the actual vulnerable implementation for...

CVE-2024-1874

CVE-2024-1874 Proof Of Concept for CVE-2024-1874 Command Injection via Array-ish $command Parameter of procopen bypass CVE-2024-1874 fix The CVE: In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailin...

CVE-2023-43482

CVE-2023-43482 TP-Link ER7206 Omada Gigabit VPN Router uhttpd freeStrategy Command injection Vulnerability SUMMARY A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP reque...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Description : Exploiting a Cross-site request forgery CSRF attack to get a Command Injection through the Webmin's File Manager feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Command Execution eXploit's C0de POC...

Ashwesker-CVE-2025-64155

🔒 CVE-2025-64155: Critical FortiSIEM Vulnerability 📌 Overview CVE-2025-64155 is a critical security vulnerability in Fortinet FortiSIEM , a popular security information and event management platform. Publicly disclosed on January 13, 2026 , it allows unauthenticated remote attackers to execute...

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC Remote Command Injection 📌 Overview CVE-2025-60021 is a critical remote command injection vulnerability found in the heap profiler built-in service /pprof/heap of Apache bRPC versions earlier than 1.15.0 , allowing unauthenticated attackers to run arbitrary OS...

CVE-2019-15107

Unauthenticated RCE via Webmin Backdoor CVE-2019–15107 Summary CVE: CVE-2019–15107 Affected Version: Webmin it will open an shell for you . Note: For versions 1.900–1.920, the “expired password changing” feature must be enabled for the backdoor to trigger. Version 1.890 is vulnerable in its defau...

OffensivePascal-CVE-2010-2075

CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...

CVE-2026-110957

The Wavlink WL-WN530BE2-A (up to firmware M30BE2_V250604 ) is vulnerable to OS command injection due to improper handling of the REMOTE_ADDR argument in the sub_12580 function of the api.cgi file within the Login Processing component. This flaw allows an unauthenticated attacker to execute arbitr...

EUVD-2026-102100

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...