186825 matches found
Exploit for OS Command Injection in Ivanti Standalone_Sentry
CVE-2026-10520-...
ChamiloLMS-CVE-2023-4220
ChamiloLMS CVE-2023-4220 エクスプロイト CVE-2023-4220 用の Python エクスプロイトです。これは Chamilo LMS = 1.11.24 に影響する、認証不要の任意ファイルアップロード脆弱性です。 この脆弱性は Chamilo の BigUpload コンポーネントに存在します。脆弱性のあるインストール環境では、アップロードハンドラが適切な検証なしに PHP ファイルのアップロードを許可します。アップロードされたファイルは Web からアクセス可能なディレクトリに保存されるため、PHP の実行が有効な場合、アップロードした PHP...
cups: cups: argument injection in mailto notifier via notify-recipient-uri
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
CVE-2025-7775-vulnerable-lab
CVE-2025-7775 脆弱性ラボ このリポジトリは、CVE-2025-7775 の nuclei テンプレートをテストするための脆弱な環境を提供します。 実行方法 docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 脆弱性テスト 1. リモートコマンド実行 RCE curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type: application/json" \ -d...
CVE-2026-102256
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...
USN-8895-1: Sudo vulnerability
It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local attacker could possibly use this issue to execute commands outside the intended time window by...
CVE-2026-23744
CVE-2026-23744 — MCPJam Inspector の認証不要のリモートコード実行 RCE CVE-2026-23744 の認証不要リモートコード実行 PoC。MCPJam Inspector 1.4.2 以前では、/api/mcp/connect を通じて、攻撃者が制御する MCP サーバーコマンドを認証なしで起動できる機能が公開されています。 許可されたテストおよび研究目的に限ります。自分が所有していない、または明示的なテスト許可を得ていないシステムに対して使用しないでください。 機能 HTTP POST - /api/mcp/connect - serverConf...
CVE-2026-102256
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...
EUVD-2026-94325
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...
CVE-2026-102256
A post-authentication OS Command Injection vulnerability (CWE-78) exists in the SonicWall SMA1000 appliance . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands under specific conditions, leading to remote code execution (RCE). The vuln...
CVE-2026-102256
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...
CVE-2025-54123
CVE-2025-54123 Hoverfly Command Injection to RCE PoC 概要 このリポジトリには、CVE-2025-54123 の影響を受ける Hoverfly インスタンスと対話するための Python 概念実証 PoC スクリプトが含まれています。 このスクリプトは以下をサポートします: ユーザー名/パスワード認証情報を使用した認証 既存のベアラートークンを使用した認証 Hoverfly ミドルウェア API エンドポイントとの対話 API レスポンス出力の表示 警告...
vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion
A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...
Important: Red Hat Security Advisory: vim security update
An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CVE-2026-106059
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106057
patool before 4.0.6 contains an OS command injection vulnerability on Windows because shellquotent fails to escape cmd.exe metacharacters or embedded double quotes in archive filenames. Attackers can supply crafted filenames like report&calc.gz for single-file formats run with shell=True to execu...
CVE-2026-106056
Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which...
CVE-2026-106058
GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...
EUVD-2026-94307
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...