Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

Node.js Embedded JavaScript 3.1.6 - Template Injection

Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settingsview optionsoutputFunctionName, which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation. id:...

Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account

The command injection vulnerability in the CGI program "remotehelp-cgi" in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST...

rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code

Langflow = 1.2.x exposes POST /api/v1/validate/code without any authentication. The endpoint calls validatecode which execs user-supplied Python code. Default-argument expressions in Python execute at function-definition time, allowing arbitrary OS command execution without authentication. id:...

Empire

Empire Empire هو إطار عمل لما بعد الاستغلال ومحاكاة الخصوم يُستخدم لمساعدة فرق الفريق الأحمر ومختبري الاختراق. خادم Empire مكتوب بلغة Python 3 وهو معياري للسماح بمرونة المشغل. يأتي Empire مدمجًا مع عميل يمكن استخدامه عن بُعد للوصول إلى الخادم. هناك أيضًا واجهة رسومية متاحة للوصول عن بُعد إلى خادم...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB Unauthenticated remote root command execution CWE-78 — OS Command Injection in the formSystemCheck handler, reachable via a hardcoded authentication backdoor. Verified against DAP-1360 RevB, firmware 2.14B05. Root Cause Two independent issues chained: 1...

CVE-2010-2075

CVE-2010-2075 — UnrealIRCd 3.2.8.1 Backdoor Exploit Overview UnrealIRCd is an open-source IRC Internet Relay Chat server — a protocol that allows users to communicate in real-time over a network, similar to early chat platforms. In 2009–2010, it was discovered that UnrealIRCd 3.2.8.1 distributed...

cve-2018-1335

Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...

vthunting

VT हंटिंग VThunting अब VirusTotal पर फीचर्ड है। Virus Total Hunting एक छोटा सा टूल है जो VT API वर्जन 3 पर आधारित है, जो मैलवेयर हंटिंग के बारे में दैनिक, साप्ताहिक या मासिक रिपोर्ट चलाने के लिए है। रिपोर्ट को ईमेल, स्लैक चैनल या टेलीग्राम के माध्यम से भेजा जा सकता है। टूल को CLI में भी इस्तेमाल...

CVE-2026-1961-foreman-poc

Foreman WebSocket Proxy Command Injection CVE-2026-1961 — PoC Proof-of-concept for a command injection vulnerability in Foreman's WebSocket proxy lib/wsproxy.rb, disclosed responsibly to Red Hat and patched. Summary Foreman's WebSocket proxy interpolates an unsanitized host value, sourced from a...

faraday_plugins

التثبيت pip install faraday-plugins الأوامر قائمة الإضافات يسرد جميع الإضافات وما إذا كانت متوافقة مع الأوامر و/أو التقارير معاملات اختيارية: -cpf / --custom-plugins-folder PATH: إذا تم تحديده، سيتم البحث أيضاً عن إضافات مخصصة في هذا المسار faraday-plugins list-plugins اختبار الاكتشاف التلقائي...

OpenSC

توثيق OpenSC صفحات الدليل الخاصة بـ أدوات سطر أوامر OpenSC وكذلك الخاصة بـ ملفات إعداد OpenSC متاحة عبر الإنترنت وعادةً ما تُوزَّع مع تثبيتك. تتضمن ويكي OpenSC، من بين أمور أخرى، معلومات عن: البدء السريع على Windows البدء السريع على macOS التجميع والتثبيت على نكهات Unix الأسئلة الشائعة مزيد من...

CVE-2026-73570

🔴 CVE-2026-73570 — high-severity unauthenticated RCE ⚠️ Unauthenticated OS Command Injection → Remote Code Execution Zimbra Collaboration Suite · SNMP Notification Processing 🧠 Overview CVE-2026-73570 is a high-severity OS command injection vulnerability affecting specific configurations of Zimbra...

gping

gping 🚀 पिंग, लेकिन ग्राफ के साथ। निम्नलिखित सुपर-पावर्स के साथ आता है: एकाधिक होस्ट्स के लिए पिंग समय का ग्राफ बनाएं --cmd फ्लैग के माध्यम से कमांड्स के निष्पादन समय का ग्राफ बनाएं कस्टम रंग विंडोज, मैक और लिनक्स समर्थन विषय सूची इंस्टॉल 💿 उपयोग 🎷 इंस्टॉल 💿 macOS Homebrew: brew install gping...

FORTIWEB_CVE-2025-64446-58034

FortiWeb Exploit Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, two...

ssh-mitm

SSH-MITM - ssh ऑडिट को आसान बनाया गया अधिकृत सुरक्षा ऑडिट के लिए एक इंटरैक्टिव SSH इंटरसेप्शन टूल। सत्रों को इंटरसेप्ट करें, लाइव ट्रैफ़िक की निगरानी करें, कमांड इंजेक्ट करें, और फ़ाइल ट्रांसफ़र में हेरफेर करें — सभी रीयल टाइम में। !Follow me on...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...