CVE-2022-30781

🍵 CVE-2022-30781 Exploit de execução remota de comando na migração de repositório Gitea. Como usar 1. Execute um servidor de sistema de arquivos HTTP com os arquivos deste repositório. 2. Edite o comando a ser executado em api/v1/repos/e99/exp/pulls/1/index.html L96. 3. Migre o repositório remoto...

PoC_CVE-2019-10149--rce

Informazioni Esecuzione remota di comandi in una shell da un servizio exim vulnerabile. Le versioni vulnerabili vanno dalla 4.87 alla 4.91 incluse. Controlla https://nvd.nist.gov/vuln/detail/cve-2019-10149. Il seguente script è basato sul PoC di Qualys. Controlla...

PT-2026-82098

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.9 through 19.1.6 GitLab EE versions 19.2 through 19.2.4 GitLab EE versions 19.3 through 19.3.0 Description An authenticated user with developer-role permissions can execute arbitrary commands within a CI context. This...

PT-2026-82256

Name of the Vulnerable Software and Affected Versions Dell Cloud Disaster Recovery versions prior to 20.3 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could exploit this fla...

EUVD-2026-66751

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

PT-2026-82208

Name of the Vulnerable Software and Affected Versions Nagios Core versions prior to 4.5.13 Nagios XI versions prior to 2026R1.5 Description A Cross-Site Request Forgery CSRF issue exists in the 'cmd.cgi' endpoint. When the Cookie header is missing, the double-submit cookie protection mechanism ca...

CVE-2026-75414

AntFlow V2.0.0 contains a command execution vulnerability in ActivitiTest.java , where user-supplied JUEL (Java Unified Expression Language) expressions are evaluated without input filtering. This allows an attacker to craft malicious expressions that lead to arbitrary command execution on the af...

EUVD-2026-66746

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability...

CVE-2022-24706

CVE-2022-24706 Contributori Scuola White Hat 4a generazione, classe 39 금정현@junghyeonkum Vulnerabilità di esecuzione remota di comandi Erlang Distribution di CouchDB CVE-2022-24706 Riepilogo Apache CouchDB è un database NoSQL open-source orientato ai documenti Document-Oriented implementato in...

cve-2024-0305exp

cve-2024-0305exp Verfügbarer Exploit für cve-2024-0305. Bei Verwendung bitte die Quelle angeben. Danke! 0x01 Produkthintergrund Das Ncast Yingkeshi HD-Intelligent-Aufzeichnungs- und Übertragungssystem ist ein Produkt der Guangzhou Yingkeshi Electronic Technology Co., Ltd. Dieses System weist eine...

susinternals

susinternals - de volta dos mortos por @deft @cablethief & @randomwalksp reino Esta ferramenta permite-lhe executar comandos remotamente através do serviço PSExeSVC a partir de um script python. Pode ser usada para: Autenticar como um utilizador com um token primário: Autenticar como sistema: O...

Important: Red Hat Security Advisory: sg3_utils security update

An update for sg3utils is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

Important: Red Hat Security Advisory: sg3_utils security update

An update for sg3utils is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

snmp-shell

SNMP Shell Shell-Simulation über Net-SNMP mit der erweiterten Funktionalität Hier eine Vorschau: Beschreibung Wenn Ihr Ziel eine Net-SNMP -Instanz mit der "extend" -Funktionalität hat und Sie eine SNMP-Community-String besitzen, die Ihnen Schreibzugriff gewährt, können Sie dieses Tool verwenden, ...

day08-CISCO-fmc-sim

Day08 — RCE de Gerenciamento no estilo Cisco FMC Simulação Esta é uma simulação mínima e educacional que demonstra a classe de impacto de uma RCE de parsing no plano de gerenciamento inspirada na CVE-2025-20265. Ela executa intencionalmente comandos a partir de entrada elaborada, apenas para...

CVE-2025-56803

CVE-2025-56803 OS-Befehlsinjektions-Schwachstelle durch Plugin-Ausführung in der Figma-Desktop-Anwendung 1. Überblick Anwendung : Figma Desktop-Anwendung Version : 125.6.5 Anbieter : Figma, Inc. CWE : CWE-78: Unzureichende Neutralisierung spezieller Elemente in einem OS-Befehl „OS Command...

CVE-2019-14287-write-up

CVE-2019-14287-análise 4294967295 Falha de Sudo Permite que Usuários Restritos Executem Comandos como Root DEMONSTRAÇÃO DA VULNERABILIDADE Adicionar um novo usuário: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // adicione senha ao usuário visudo Adicionar uma nova entrada test...

Important: Red Hat Security Advisory: sg3_utils security update

An update for sg3utils is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...