EUVD-2026-95166

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-84278 IBM Guardium Data Protection Command Injection

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...

CVE-2026-84278

IBM Security Guardium Data Protection version 12.2 is vulnerable to a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands via attacker-controlled arguments, leading to command execution with root privil...

tlsenum

tlsenum tlsenum एक कमांड-लाइन TLS गणना उपकरण है जो यह पता लगाने का प्रयास करता है कि सर्वर किन TLS सिफर सूट का समर्थन करता है और उन्हें प्राथमिकता के क्रम में सूचीबद्ध करता है। यह TLS ClientHello संदेश भेजकर और सर्वर से ServerHello प्रतिक्रियाओं को पार्स करके काम करता है। tlsenum मानता है कि सर्व...

DoHC2

⚠️ नोट: यह उपकरण अब सक्रिय रखरखाव के अंतर्गत नहीं है। DoHC2 DoHC2, Ryan Hanson https://github.com/ryhanson/ExternalC2 के ExternalC2 पुस्तकालय का उपयोग DNS over HTTPS DoH के माध्यम से कमांड और कंट्रोल C2 के लिए करने की अनुमति देता है। यह लोकप्रिय Adversary Simulation और Red Team Operations Software...

r2s

React2Shell R2S - CVE-2025-55182 परीक्षण उपकरण CVE-2025-55182 भेद्यता आकलन के लिए उन्नत शोषण परीक्षण उपकरण विशेषताएँ • स्थापना • उपयोग • परीक्षण वातावरण • कानूनी अस्वीकरण 📖 R2S क्या है? R2S React2Shell एक सुरक्षा परीक्षण उपकरण है जिसे सुरक्षा शोधकर्ताओं, डेवलपर्स और पैठ परीक्षकों की यह आकलन करने...

gcat

Gcat एक गुप्त Python-आधारित बैकडोर जो Gmail को कमांड और कंट्रोल सर्वर के रूप में उपयोग करता है यह प्रोजेक्ट Benjamin Donnelly के मूल PoC कोड से प्रेरित था यह PoC कोड है... ... जो संगठनों को इन प्रकार के हमलों के विरुद्ध अपनी सुरक्षा का परीक्षण करने के लिए जारी किया गया था। उन्हें पहचानने के लिए...

CVE-2026-107322 OS command injection in Amazon Agent Plugins for AWS databases-on-aws

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...

EUVD-2026-95151

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...

CVE-2026-107322

The Amazon Agent Plugins for AWS databases-on-aws plugin, in versions prior to 1.7.1 , is vulnerable to an OS command injection (CWE-184). An attacker can execute arbitrary operating system commands on the host running the helper by providing a crafted database command value within the agent cont...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE स्कैनर — CVE-2026-39808 Fortinet FortiSandbox में बिना प्रमाणीकरण के root के रूप में OS कमांड इंजेक्शन भेद्यता • स्थापना • उपयोग • यह कैसे काम करता है • पाइपलाइन • Shodan Dorks • अस्वीकरण भेद्यता CVE-2026-39808 Fortinet FortiSandbox में एक गंभीर बिना प्रमाणीकरण वाली OS कमांड...

CVE-2026-107704 image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file...

CVE-2026-107704

The image_optimizer Ruby gem versions 1.3.0 through 1.9.0 contains an OS command injection vulnerability in the ImageOptimizer#identify_format function. When the identify option is enabled, an attacker who can control the image path—such as through an uploaded file name—can append shell metachara...

CVE-2026-107704 image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file...

CVE-2026-107704 image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file...

EUVD-2026-95149

The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file...

EUVD-2026-95148

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by...

CVE-2026-107703 @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by...

CVE-2026-107703

The @enmaso/node-convert library (versions through 1.0.0) contains an OS command injection vulnerability in the convert.js component. The root cause is the use of unsanitized filepath and convertTo arguments when executing ImageMagick commands via child_process.exec() . Attackers can inject shell...

EUVD-2026-95145

ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to childprocess.exec in ppt2png.js,...