AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1791559300)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791559300 advisory. - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context...

Cisco Application Policy Infrastructure Controller API Command Injection (cisco-sa-apic-cmdinj-L6VR4E7)

According to its self-reported version, Cisco Application Policy Infrastructure Controller APIC is affected by a vulnerability. - A command injection vulnerability exists in the web-based management API due to insufficient input validation of user-controlled command arguments. An authenticated,...

Oracle Linux 8 : ruby:2.5 (ELSA-2026-73519)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-73519 advisory. - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 - Fix REXML ReDoS vulnerability. CVE-2024-49761...

RHEL 8 : libxml2 (RHSA-2026:79119)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79119 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

PT-2026-108985

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.11.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc1 and earlier Description The Argo CD repo-server is subject to command injection when cloning, testing, ...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQL Injection Exploit A proof-of-concept exploit tool for CVE-2025-26794, demonstrating SQL injection vulnerability in Exim 4.98 mail server via the ETRN command when using SQLite DBM storage. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING ONLY This tool is provided...

MangoPunch-CVE-2022-31898

🥭 MangoPunch: CVE-2022-31898 Authenticated OS Command Injection for GL.iNet Devices | / | | \ | | | \ / | | | | | | | |/| |/ | ' \ / |/ | / | | | ' \ / | ' \ | | | | | | | | | | | | | | || | | | | | | | | || ||,|| ||, |/|| ,|| |||| || / | |/ 🔍 Vulnerability Overview This repository contains...

CVE-2024-25081_2025-47273

CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...

CVE-2021-27928

CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before...

CVE-2022-46169

CVE-2022-46169 This repository contains a Proof of Concept PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti = 1.2.22 by chaining an Authentication Bypass and a Command Injection, described by Sonar in this blog post. The same vulnerabilities were also discovered by: Steven Seeley mrme of...

CVE-2020-8958

A proof of concept for CVE-2020-8958 written in Python. The script will return the contents of /etc/passwd if successful. CVE-2020-8958 Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 This repository contains a proof-of-concept exploit for CVE-2024-50498, an unauthenticated code injection vulnerability in the LUBUS WP Query Console WordPress plugin, leading to...

CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

CVE-2019-6340 / SA-CORE-2019-003 Three scripts included to demonstrate how Drupal 8.6.9 is vulnerable to CVE-2019-6340: createnodeviarest.py - Example of normal authenticated node create with REST API doesnotcorrespond.py - Proving the request is processed even without authentication exploit.py -...

CVE-2018-17431-PoC

CVE-2018-17431-PoC Prueba de concepto para CVE-2018-17431 Título del Exploit: Comodo Firewall & Central Manager UTM Todas las versiones anteriores a 2.7.0 y 1.5.0 Ejecución remota de comandos basado en Web Shell Autor del Exploit: Milad Fadavvi Página del vendedor: https://www.comodo.com/ Enlace...

CVE-2026-26830

CVE-2026-26830: OS command injection in pdf-image Summary pdf-image through version 2.0.0 allows OS command injection via the pdfFilePath argument. The package builds shell command strings with util.format and executes them with childprocess.exec. If an application passes an attacker-controlled...

Gitea-Forgejo-CVE-2025-68937

Arbitrary template expansion vulnerability in Gitea and Forgejo This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. Summary While checking Forgejo's and Gitea's source code to better understand how templating is performed, I discovered a vulnerability...

CVE-2025-69600

CVE-2025-69600 autor: Rafael José Núñez Gulías empresa: Iberian Var Group Productos afectados: RayVentory Scan Engine 12.6 Update 8 y versiones anteriores Aviso de Raynet: RSEC200966 Inyección de comandos en rvia de Raynet permite a los atacantes ejecutar comandos a través de las opciones...

CVE-2026-107734

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command line is passed to CreateProcessW. A user...

cve-2019-15107

CVE-2019-15107 - Webmin Unauthenticated RCE Description This repository contains a proof-of-concept PoC exploit for CVE-2019-15107 affecting Webmin versions 1.890 through 1.920. The script exploits a backdoor in versions 1.890 through 1.920 that allows unauthenticated users to inject commands int...

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...