CVE-2024-7120-Exploit-by-Dark-07x

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

DIR-890L-1.20-RCE

D-Link DIR-890L RCE Affected Version: = v1.22B01 Hotfix latest Firmware: Here This model has reached the end of its life-cycle. The resources associated with these products have ceased their development and are no longer supported. D-Link Systems, Inc. recommends retiring these products and...

CVE-2023-36319

CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...

CVE-2024-3400-

PAN-OS Firewall Command Injection Vulnerability This repository contains a Go script that exploits a Command Injection vulnerability in firewalls running Palo Alto Networks' PAN-OS operating system. The vulnerability, identified as CVE-2024-3400, allows an unauthenticated attacker to execute...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Description CVE-2022-25765 is a command injection vulnerability affecting pdfkit Ruby gem in versions 0.8.7.2. The vulnerability has a CRITICAL severity with CVSS 9.8, as it allows remote command execution without authentication. The problem lies in th...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Vulnerability CVE-2022-30525 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-30525.py -u http://127.0.0....

DSL-2750U-Full-chain

firmware-analysis 1. DSL-2750U Bugs : misconfiguration of tftp server CVE-2021-3707 command injection bug CVE-2021-3708...

CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - command injection CVE-2019-1010174 Detail Modified This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided. Description CImg The CImg Library v.2.3...

CVE-2024-3400

CVE-2024-3400: OS Command Injection Vulnerability in GlobalProtect Gateway Severity: CRITICAL 10/10 ⚠️...

CVE-2025-34159

CVE-2025-34159: Docker Compose Injection in Coolify Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34159 Affects| Coolify ≤ v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Comma...

CVE-2022-36779

CVE-2022-36779 exploit code for Unauthenticated OS Command Injection Proscend at Industrial Cellular Router. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.html...

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

CVE-2022-22947

CVE-2022-22947 Run: CVE-2022-22947.exe ip command Affected versions: Spring Cloud Gateway 3.1.1 Spring Cloud Gateway 3.0.7 Spring Cloud Gateway other no longer updated versions...

CVE-2025-53547-POC

CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...

CVE-2025-25706

CVE-2025-25706 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code Execution...

CVE-2022-30525

CVE-2022-30525 A OS Command Injection Vulnerability in the CGI Program of Zyxel Executive Summary The vulnerability, first discovered on April 13, 2022, caused remote code execution in Zyxel firewall products. This important vulnerability with a CVSS score of 9.8 was blocked with the update...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2018-14699

CVE-2018-14699 UnAuth Command injection in the enableuser function of DroboAccess v2.1 Usage: To use First startup a listener ncat -nvlp 1337 Next run the exploit example: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host for exploitation, ex...

CVE-2024-46658

CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Command Injection Vulnerability Usage 1- Edit the URL in the script. 2- Edit the CookieLogin value in the script. 3- Run the script, it will allow you to executing commands. Vulnerability Details GET...