CVE-2018-19518

CVE-2018-19518 last rapport here : https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Usage run app docker-compose up -d example normal usage for the web app. imap : webmail.grenoble-inp.org user : [email protected] password : xxx exploit using...

CVE-2023-24706

CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options

Summary @nx/maven and @nx/gradle spawn their project-graph analyzers through a shell and interpolate plugin options read from nx.json straight into the command line. Because a shell parses the whole line, an option value containing shell syntax is executed as a command by any nx command that...

EUVD-2026-113391

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2024-9264

CVE-2024-9264 python CVE-2024-9264.py '' -u '' -p '' -c ''...

CVE-2023-22527

I am not responsible for any illegal attacks CVE-2023-22527 Bulk scanning scripts help usage: python3 CVE-2023-22527.py -u -f -c options: -h, --help show this help message and exit -u TARGET, --target TARGET Target URL -f FILE, --file FILE URL file -c CMD, --cmd CMD Commands to execute -t THREAD,...

CVE-2026-91913

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

magnolia-rce

Exploit Title: Magnolia DX Core 6.3.8 - Command Injection Date: 05/16/2025 Exploit Author: tmrswrr Version: 6.3.8 Vendor home page: https://docs.magnolia-cms.com/home/ Product: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Authenticate as an admi...

FnOS-GUI-Exploit-Tool

FnOS GUI Exploit Tool This project is a comprehensive vulnera...

EUVD-2026-113947

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-91913

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-91913

Dell OpenManage Enterprise versions prior to 4.8.0 are susceptible to an OS Command Injection vulnerability (CWE-78) due to the Improper Neutralization of Special Elements used in an OS Command. A low privileged attacker with remote access could potentially exploit this flaw to achieve Command ex...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CVE-2026-118992

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup. restoreConfigBlob feeds the database dump in a backup to the sqlite3 command-line shell. The shell runs lines starting with a dot as its own commands, so .shell or...

EUVD-2026-113918

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup. restoreConfigBlob feeds the database dump in a backup to the sqlite3 command-line shell. The shell runs lines starting with a dot as its own commands, so .shell or...

CVE-2026-118992

Versions of CallBackery for Perl prior to 0.62.0 are vulnerable to OS command injection via a restored configuration backup. The root cause is that the restoreConfigBlob() function feeds a database dump from a backup into the sqlite3 command-line shell. Because the shell executes lines starting w...

CVE-2026-118992 CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup. restoreConfigBlob feeds the database dump in a backup to the sqlite3 command-line shell. The shell runs lines starting with a dot as its own commands, so .shell or...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2025-6384

CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...