CVE-2026-106057

Versions of patool prior to 4.0.6 are vulnerable to an OS command injection vulnerability on Windows . The issue stems from the shell_quote_nt function failing to properly escape cmd.exe metacharacters or embedded double quotes within archive filenames. An attacker can exploit this by providing c...

EUVD-2026-94305

patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execu...

EUVD-2026-94306

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106058

GitAhead versions up to and including 2.7.1 are vulnerable to an OS command injection in the src/git/Filter.cpp component. The flaw exists because malicious repositories can execute arbitrary commands by substituting crafted filenames into clean/smudge filter commands. Specifically, an attacker c...

CVE-2026-106058 GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106057 patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt

patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execu...

CVE-2026-106058 GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

CVE-2026-106056

Rundeck versions before 6.2.0 are vulnerable to an OS command injection vulnerability. The flaw exists because the CLIUtils.quoteWindowsCMDArg method wraps free-text options in ineffective single quotes, allowing authenticated users with job run permissions to inject cmd.exe metacharacters like &...

EUVD-2026-94304

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

gping

gping 🚀 Ping, mais avec un graphique. Il possède les super-pouvoirs suivants : Graphique du temps de ping pour plusieurs hôtes Graphique du temps d'exécution des commandes via l'option --cmd Couleurs personnalisées Prise en charge de Windows, Mac et Linux Table des matières Installation 💿...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 Security Research Statement This project is intended solely for security research and educational purposes. Using this tool for unauthorized testing is illegal. The author is not responsible for any misuse or damage. 📋 Overview CVE-2024-31317 is a critical security...

CVE-2023-32073

WWBN AVideo currentVersion Authenticated RCE A command injection vulnerability exists at plugin/CloneSite/cloneClient.json.php which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854 which affects WWBN Avideo up to version 12.3 Vulnerable Code...

Bcrypt-forcer

Bcrypt-forcer sqlmap Bcrypt decryption tool Bcrypt hash cracker...

Fastgate

TLDR Это краткий отчет об уязвимости CVE-2019-12489, обнаруженной при изучении модема/роутера Fastgate от Fastweb с помощью Ghidra. Уязвимость позволяет выполнить внедрение команды через HTTP-запрос и может быть использована для включения SSH-оболочки. Сбор и извлечение прошивки Все файлы прошиво...

CVE-2023-26067

CVE-2023-34362 POCs for credential dumping, reverse shells, and playing music by abusing a command injection, CVE-2023-26067, affecting Lexmark Printers. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...