CVE-2025-34037

CVE-2025-34037 Versión en Python del exploit RCE de Linksys tmUnblock.cgi Solo para uso educativo. Ejecútalo contra tus propios dispositivos. Vulnerabilidad El endpoint tmUnblock.cgi en varios modelos de routers Linksys acepta solicitudes POST sin validar el encabezado Authorization. El parámetro...

EUVD-2026-42899

PraisonAI: Shell command allowlist bypass via find -exec built-in action...

PraisonAI: Shell command allowlist bypass via find -exec built-in action

Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj utility-tools shell chaining and GHSA-vjv9-7m7j-h833 SandboxExecutor chaining can be bypassed via find's built-in -exec action. The fix blocks shell metacharacters ;|& + The ...

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

Summary The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization. An attacker can achieve arbitrary file write to any location on the filesystem including /root/.ssh/authorizedkeys, /etc/crontab and arbitrary command...

EUVD-2026-43181

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls...

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports. Its strict classmethod is explicitly described as creating "a...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner para RCE no autenticada en Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Prueba de Concepto PoC y Escáner Automatizado para RCE No Autenticada en Sneeit Framework CVE-2025-6389 Este script Python robusto es una PoC funcional y una...

CVE-2026-84057

IBM Guardium Data Protection versions 12.2.2 and 12.1 are vulnerable to OS command injection due to the improper neutralization of special elements used in an OS command. This flaw could allow a remote attacker to execute arbitrary commands on the affected system. The vulnerability is associated ...

CVE-2026-84057 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can execute arbitrary SQL commands due to the improper neutralization of special elements used in an SQL command. The vulnerability has a HIGH base severity score of...

CVE-2026-19482

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments...

CVE-2026-107780

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string an...

CVE-2026-107779

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimitlimit = false. Unauthenticated attackers can POST GLUESHELL, GLUEPYTHON, or GLUEPOWERSHELL job...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

cachegrab

Cachegrab Cachegrab is a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores. For an overview of how Cachegrab works under the hood, see the Cachegrab release announcement. Using Cachegrab on Android It is...

GTFOBLookup

GTFOBLookup Offline command line lookup utility for GTFOBins, LOLBAS, WADComs, and HijackLibs. Files .gitignore : Gitignore file gtfoblookup.1 : Linux man page for GTFOBLookup gtfoblookup.py : GTFOBLookup utility LICENSE.md : License file README.md : This file requirements.txt : List of required...

idahunt

Panoramica Requisiti Funzionalità Scripting Utilizzo Simulare senza eseguire Analisi iniziale Eseguire uno script IDA Python Binary diffing Requisiti Analisi iniziale Diffing dei file Diffing di una funzione Filtri Rilevamento dell'architettura Specifici per target Progetti noti che utilizzano...

CVE-2026-19482

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to arbitrary command execution . The root cause is the improper neutralization of command arguments (CWE-88), which could be leveraged by a remote authenticated...

EUVD-2026-95273

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments...