CVE-2020-5902

CVE-2020-5902 / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs F5 BIG-IP の Traffic Management User Interface...

CVE-2018-11510

CVE-2018-11510向けのエクスプロイトを数件、Kyle Lovett（@SquirrelBuddha）と私（Matthew Fulton/@haqur）が作成しました。 認証なしのコマンドインジェクションを利用して、ルートシェルを取得します。 このMetasploitモジュールには、リポジトリに別途ペイロードが含まれています。近いうちにMSFへのプルリクエストで組み込めるかどうか試してみる予定です。 このバグは現在 修正されているかもしれません が、他にも見つかるのを待っているバグがきっとあるでしょう :D...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

このリポジトリには README がありません。...

CVE-2024-29269

CVE-2024-29269 TLR-2005KSHルーター上で認証なしのOSコマンド実行を可能にする脆弱性です。このエクスプロイトは、その脆弱性を悪用して影響を受けるルーター上で任意のコマンドを実行します。 Dork ZoomEye :- title:"Login to TLR-2005KSH" ソース: https://leakix.net/search?scope=service&q=%22Login+to+TLR-2005KSH%22...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERTは、Eximの複数のバージョン（4.87～4.91）に影響を与える脆弱性CVE-2019-10149を悪用して、昇格した権限でコマンドを実行できるPoCを開発しました。 この脆弱性をローカルで悪用するには、実行するコマンドを定義する必要があります。一方、リモートの場合は、EximがACL "verify= recipient" を使用しないシナリオのみが考慮されており、この場合、コマンドに加えてサービスのIPアドレスとポートを指定する必要があります。...

[SECURITY] [DSA 6548-1] node-shell-quote security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...

CVE-2026-79815

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-79803

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-102160

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

USN-8892-1 wsl-pro-service vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

CVE-2026-105841

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

cve-2020-11651-exp-plus

bash로 --exec 매개변수를 실행합니다. 원래 스크립트는 /bin/sh였으므로 bash 리버스 셸과 같은 일부 명령이 호환되지 않습니다. 2. 원래 코드는 로컬 salt-master의 버전을 가져와 원격 호스트가 영향을 받는지 판단했는데, 명백한 논리 오류입니다. 관련 코드를 직접 삭제했습니다. 3. 배치 스캔 기능 추가 python saltstack.py -b targetsfile.txt --threads 16 ,targetfile.txt 내용은 다음과 같습니다. 127.0.0.1:4506...

CVE-2026-102160

An OS command injection vulnerability exists in CloudVision CUE backup management . This flaw allows an authenticated Super User to submit a crafted backup request to execute arbitrary commands with the privileges of the affected service. The vulnerability is associated with CWE-78 (Improper Neut...

EUVD-2026-93957

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...