CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

git-clean-filter

Questo è un problema documentato noto, ma l'ho trovato durante la mia ricerca ed è piuttosto utile per RT/PT. Riepilogo: La direttiva filter..clean in .git/config punta a uno script e .gitattributes vincola quel filtro a un file tracciato. Ogni volta che git esegue un vero git diff di quel file,...

CVE-2026-39987

CVE-2026-39987 - Bypass dell'autenticazione WebSocket del terminale marimo poc Panoramica Questo repository contiene CVE-2026-39987 che interessa le versioni di marimo precedenti alla 0.23.0. La vulnerabilità è presente nell'endpoint WebSocket del terminale, dove un'applicazione insufficiente...

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

CVE-2025-26237

D-Link DI-7001 MINI_5G (firmware 19.10.31A1 ) contains a code execution vulnerability in the flag parameter of the msp_info handler. An attacker can exploit this flaw to execute arbitrary commands on the device. The provided documents do not specify the exact injection mechanism (e.g., shell meta...

MiracleLinux 9 : sg3_utils-1.47-10.el9_8.1 (AXSA:2026-1623:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1623:02 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Tenable has extracted the preceding description...

CVE-2025-59528-PoC

CVE-2025-59528 PoC zu Bildungszwecken Nur zu Bildungszwecken. Dieses Projekt ist für kontrollierte Sicherheitsforschung, Demonstrationen im Unterricht und autorisierte Tests in einer isolierten Laborumgebung vorgesehen. Verwenden Sie es nicht gegen Systeme, Netzwerke, Anwendungen oder Konten, die...

SharpRDP

SharpRDP - Konsolenanwendung des Remotedesktopprotokolls zur authentifizierten Befehlsausführung Erstellung Zum Kompilieren öffnen Sie das Projekt in Visual Studio und erstellen Sie einen Release-Build. Zwei DLLs werden in das Release-Verzeichnis ausgegeben, diese werden jedoch nicht benötigt, da...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Exploit proof-of-concept per la vulnerabilità Log4j CVE-2021-44228, nota anche come Log4Shell. Questo strumento genera una classe Java dannosa, avvia un server di riferimento LDAP e serve il payload su HTTP, consentendo a un attaccante remoto di eseguire comandi...

Deserialization of Untrusted Data

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via unsafe deserialization in AllowlistUnpickler. An attacker can execute arbitrary commands by supplying a...

CVE-2026-57998

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Segreto JWT hard-coded nel broker MQTT del mesh Cudy WR3000 2.0 Strumenti PoC per l'articolo Hunt-Benito "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

CVE-2026-57998 better-npm-audit OS Command Injection via registry flag

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

EUVD-2026-64261

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

CVE-2026-57998

better-npm-audit (npm package) through 3.11.0 and the 4.0.0-rc.2 prerelease is vulnerable to OS command injection via the --registry option. The user-supplied registry value is interpolated into a command string in src/handlers/handleInput.ts without validation or quoting, then passed to child_pr...

Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

MAL-2026-14358 Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Panoramica RCE critica pre-autenticazione in BeyondTrust Remote Support e Privileged Remote Access. Un attaccante remoto non autenticato può eseguire comandi del sistema operativo...

CVE-2026-53541

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...