186828 matches found
oxasploits
oxasploits عدد من الاستغلالات Exploits كتبها oxagast معظم هذه الثغرات CVEs منسوبة إلى oxagast أيضًا للاتصال: Marshall Whittaker [email protected] ثغرات CVE وشيفرة إثبات المفهوم PoC CVE-2006-3392 استغلال جذر عن بُعد لـ Webmin =1.29 يستولي هذا الاستغلال على ملف تعريف ارتباط Cookie خاص بـ Webmi...
CVE-2026-26833
CVE-2026-26833: حقن أوامر نظام التشغيل في thumbler الملخص يسمح thumbler حتى الإصدار 1.1.2 بحقن أوامر نظام التشغيل في الدالة thumbnail داخل lib/thumbler.js. تقوم الحزمة بتسلسل القيم input وoutput وtime وsize في سلسلة أوامر ffmpeg واحدة ثم تنفيذها عبر childprocess.exec. يمكن للمهاجم الذي يتحكم في...
CVE-2023-20198-Exploit
Contournement d'authentification Cisco IOS XE CVE-2023-20198 Ce dépôt contient un proof-of-concept pour CVE-2023-20198 , une vulnérabilité de contournement d'authentification affectant l'interface Web Cisco IOS XE. La vulnérabilité permet à des attaquants non authentifiés d'exécuter des commandes...
CVE-Exploit-Research-Development
🔐 أداة استغلال SSH للاستخدام التعليمي فقط 📌 الوصف توضح هذه الأداة استغلال: CVE-2008-0166 CVE-2008-1657 تتصل بخدمات SSH الضعيفة وتوفر: واجهة تفاعلية مستمرة تسجيل تنفيذ الأوامر إنشاء تقارير PDF و DOCX تلقائيًا ⚙️ الميزات واجهة مستمرة cd, ls, pwd, إلخ تلتقط مخرجات الأوامر الحقيقية تنشئ تقارير احترافي...
Drupalgeddon2-CVE-2018-7600
🔥 Drupalgeddon 2 Exploit — bixi.py 📖 الوصف bixi.py هو أداة استغلال للثغرة CVE‑2018‑7600 Drupalgeddon 2 التي تؤثر على Drupal 7. يتيح تنفيذ الأوامر عن بُعد RCE على خوادم Drupal الضعيفة عبر واجهة بديهية وأوامر محددة مسبقًا. ⚠️ إخلاء المسؤولية / تنبيه قانوني هذا البرنامج مخصص فقط للأغراض التعليمية...
CVE-2026-106126
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...
CVE-2026-107780
The Dromara Skyeye platform is vulnerable to an unauthenticated OS command injection vulnerability in the /post/TtsController/textToSpeech endpoint. The root cause is a failure to properly neutralize the format parameter , allowing attackers to inject a single quote to break out of a PowerShell s...
CVE-2026-107780 Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...
EUVD-2026-95258
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...
CVE-2026-107780 Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...
EUVD-2026-95257
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...
EUVD-2026-95207
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...
CVE-2026-106126 Command Injection
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...
CVE-2026-106126
A command injection vulnerability exists in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) . This flaw allows an authenticated, low-privileged attacker to execute arbitrary commands with SYSTEM privileges on the PDCe . The root cause is identified as CWE-78 (Improper Neu...
CVE-2026-73570
CVE-2026-73570 — Injection de commande OS non authentifiée dans zimbra-snmp de Zimbra PoC Preuve de concept d'exploit pour CVE-2026-73570 , une injection de commande OS non authentifiée CWE-78, CVSS 8.9 dans Zimbra Collaboration Suite Avertissement : Ce PoC est destiné uniquement à des tests de...
CVE-2025-27636-RCE-in-Apache-Camel
CVE-2025-27636 – RCE Apache Camel Exploit Python simple pour la RCE par injection d'en-tête Apache Camel CVE-2025-27636. Utilisation Exécution de commande en une seule fois ┌──root㉿user-/run/…/user/2024/HTBox/CVE-2025-27636 └─ python3 CVE-2025-27636.py -t http://192.168.159.120 -c "id" Executing:...
CVE-2026-69451-PoC
Fastprox EOP PoC pour la CVE-2026-69451, article de blog sur https://fj016.fr/blog/cve-2026-69451-en Utilisation fastproxeop.exe --cmd "whoami /all" --out "filename.txt"...
struts2-tool
Outil de détection et d'exploitation Struts2 s2tool Un outil de détection et d'exploitation des vulnérabilités Struts2 S2-045 / S2-046 CVE-2017-5638 implémenté purement en Java. Le module de détection couvre les deux vulnérabilités S2-045 / S2-046, le module d'exploitation offre l'exécution de...
POC-CVE-2026-0769
Description Proof of concept exploit code for CVE-2026-0769 Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stor...