FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

CVE-2026-77537

CVE-2026-77537 is a CRITICAL (CVSS 10.0) vulnerability in UniFi Protect Application by Ubiquiti, rated by the vendor. An Improper Input Validation flaw allows a network-based attacker with no prior privileges and no user interaction to perform a Command Injection on the host device. The changed s...

CVE-2026-77537

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66364

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection Una vulnerabilità, classificata come molto critica, è stata trovata in VMware Workspace ONE Access e Identity Manager. Il componente interessato è Template Handler. Riferimento: https://vuldb.com/?id.196644...

CVE-2012-1823-exploit-for-https-user-password-web

Il file CVE-2012-1823 è un exploit uso : python3 CVE-2012-1823.py Il file CVE-2012-1823,CVE-2021-2291.py verifica se il sito è vulnerabile a CVE-2012-1823 o CVE-2021-2291 uso : python3 CVE-2012-1823,CVE-2021-2291.py comando whoami cd ls testato su Kali Linux...

tapodate

tapodate Usa https://github.com/hacefresko/CVE-2021-4045 exploit per impostare la data e altri comandi su una Tapo C200 offline...

CVE-2020-14882

CVE-2020-14882 Questo script consente l'esecuzione remota di codice RCE su Oracle WebLogic Server utilizzando una richiesta GET non autenticata. Sfrutta la vulnerabilità CVE-2020-14882. Eseguendo comandi arbitrari, un attaccante può ottenere accesso non autorizzato al server. Dettagli dell'exploi...

CVE-2025-53547-POC

CVE-2025-53547 POC questa è una POC per CVE-2025-53547 Chart.lock collega il file di test a /tmp/1.txt /tmp/1.txt inietta un comando che crea /tmp/2.txt In un ambiente di prodotto reale, puoi modificare il file di collegamento Chart.lock per iniettare qualsiasi comando desideri come: /root/.bashr...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-63125

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can trick the daemon into writing to arbitrary host files via a symlink in backup.yaml, potentially leading to root-level command execution on the host. Mitigation No mitigation is needed as Incus is not...

CVE-2026-62867

A flaw was found in Incus, a container and virtual machine manager. Improper validation of storage volume settings allows a project-scoped user to inject arguments into commands executed as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat product...

CVE-2026-48769

A flaw was found in Incus, a container and virtual machine manager. A malicious image server can cause the Incus client to write files to arbitrary locations via a crafted response header, potentially leading to command execution as root. Mitigation No mitigation is needed as Incus is not shipped...

CVE-2026-48755

A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-48751

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...

CVE-2026-48750

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...

CVE-2026-48749

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...