CVE-2021-46704

OS Command Injection in GenieACS CVE-2021-46704 CVE-2021-46704 Nuclei template Reference : https://github.com/advisories/GHSA-2877-693q-pj33 https://nvd.nist.gov/vuln/detail/CVE-2021-46704 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-46704...

CVE-2022-46169

Cacti remoteagent.php Remote Command Execution Vulnerability CVE-2022-46169 Vulnerability Description Cacti is a server monitoring and management platform. A command injection vulnerability exists in versions 1.2.17 to 1.2.22. An attacker can bypass server-side validation via the X-Forwarded-For...

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

CVE-2026-75616

CVE-2026-75616 TP-Link Archer C20 v6 Web管理インターフェースにおける認証済みOSコマンドインジェクション。 BPA WAN設定値は適切な無害化なしにsystemに渡されるため、隣接ネットワーク上の認証済み管理者がrootとしてコマンドを実行できる。 Daniil Gordeev totekuh によって発見および報告されました。 影響を受けるバージョン Archer C20 v6 EUファームウェア 0.9.1 Build 260811 より前 Archer C20 v6 USファームウェア 0.9.1 Build 260812 より前 Arche...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...

CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914 is a critical vulnerability affecting the D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L up to version 20241028. The function cgiuseradd in the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd is the culprit, allowing attackers to inject operating system command...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

Vulnerability-Research

🛡️ 脆弱性研究 ここでは、私が発見した脆弱性、その弱点の詳細を含む対応するWrite-Up、およびそれらの影響と対策に関する知見を取りまとめています。 🏆 採番されたCVE CVE ID| 脆弱性タイトル| 深刻度/CVSS| 公開日| Write-Up ---|---|---|---|--- N.A.| Microsoft Security Response Center MSRC 2026年第1四半期セキュリティ研究者リーダーボード 192| N/A| Apr 2026| 公式謝辞ページ N.A.| Microsoft Online Services に対する MSRC...

CVE-2026-4480-POC

CVE-2026-4480 - Samba印刷サブシステムのリモートコード実行 概要 CVE-2026-4480 に関連する概念実証および研究資料。これはSamba印刷サブシステムに影響を与える重大なリモートコード実行（RCE）脆弱性です。 この脆弱性は、設定された print command に %J 置換パラメータを通じて渡される、ユーザー制御の印刷ジョブ記述の不適切な処理に起因します。 脆弱性の詳細 CVE: CVE-2026-4480 コンポーネント: Samba印刷サブシステム 種類: OSコマンドインジェクション（CWE-78） 影響: リモートコード実行 攻撃ベクトル:...

CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

CVE-2024-56115

CVE-2024-56115 제안된 설명 Amiro.CMS 7.8.4 이전 버전에는 특수 요소를 중화하기 위한 조치를 취하지 않아 발생하는 취약점이 존재합니다. 이 취약점으로 인해 원격 공격자가 크로스 사이트 스크립팅XSS 공격을 수행할 수 있습니다. 취약점 유형 CWE-78 | OS 명령에 사용되는 특수 요소의 부적절한 중화'OS 명령 주입' 제품 공급업체 Amiro.CMS https://www.amiro.ru 영향을 받는 제품 코드 베이스 Amiro.CMS – 7.8.4 및 이전 버전 영향: 권한 상승 True 공급업체가...

CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-40176 , a critical OS Command Injection vulnerability discovered in Composer 's Perforce VCS driver versions prior to 2.2.27 and 2.9.6. The vulnerability exists in t...

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection

CVE-2026-2256-Threat-Model----ms-agent-Command-Injection...

watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Detection Artifact Generator for Dell UnityVSA CVE-2025-36604 https://github.com/user-attachments/assets/28488a97-7845-4b78-9fe7-64b9172ab023 See our blog post for technical details Detection in Action python...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions &...

K000163537: Vim vulnerability CVE-2026-73073

Security Advisory Description Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insufficiently escaped typeref: or typename: value from a tags file, allowing an unterminated...

Termix-research

Termix 보안 연구 Termix에 대한 취약점 연구, 웹 기반 SSH 및 서버 관리 플랫폼 13k+ 스타. CVE| 이슈| 심각도| 수정 버전| 보안 권고 ---|---|---|---|--- CVE-2026-45746| 세션 하이재킹 → RCE| 9.0 치명적| v2.3.2| GHSA-cx2r-843c-vww8 CVE-2026-45750| OS 명령 삽입| 9.0 치명적| v2.3.2| GHSA-v26q-rpv5-9m72 CVE-2026-53547| 계정 탈취| 8.8 높음| v2.3.2| GHSA-6r97-7wp3-2g3...