cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...

CVE-2026-46394-haxcms-git-command-injection

CVE-2026-46394 - HAXcms Git.php OS Command Injection CWE-78 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verify the issue on unpatched...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

MovableType - Remote Command Injection

MovableType 5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8. 2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution

SEOWON INTECH SLC-130 and SLR-120S devices allow remote code execution via the ipAddr parameter to the systemlog.cgi page. id: CVE-2020-17456 info: name: SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution author: gy741,edoardottt severity: critical description: SEOWON INTECH...

WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read

WGDashboard = 4.2.3 contains a command injection caused by multiple OS command injection points, letting authenticated attackers execute arbitrary commands as root. id: CVE-2026-15733 info: name: WGDashboard = 4.3.2 - Authenticated OS Command Injection /etc/passwd Read author: str4k3r,0xAkoko...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS 명령 삽입 → RCE 연구자: K 공개 유형: 책임 있는 공개 상태: 패치됨 영향받는 제품: Chamilo LMS 2.0 v1.11.32에서 확인됨...

CVE-2026-25089

🚨 CVE-2026-25089 - Critical OS Command Injection in FortiSandbox 📖 Overview CVE-2026-25089 is a critical OS Command Injection CWE-78 vulnerability affecting multiple Fortinet FortiSandbox deployments. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP...

CVE-2026-25512

CVE-2026-25512: Execução Remota de Código via Injeção de Comandos no Manipulador TNEF - Group-Office Vetor CVSS 4.0 : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Índice Resumo Versões Afetadas Detalhes Técnicos Causa Raiz Fluxo da Fonte ao Sumidouro Exploração Exploit...

CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection

CVE-2026-25546 PoC - godot-mcp OS Command Injection Autore: Mohammed Idrees Banyamer GitHub: mbanyamer Data: 04 febbraio 2026 Titolo dell'Exploit godot-mcp 0.1.1 - OS Command Injection tramite projectPath CVE CVE-2026-25546 CWE CWE-78 Neutralizzazione impropria di elementi speciali utilizzati in ...

poc-rebar3

Iniezione di shell in Rebar3 CVE-2020-13802 Prova di concetto root@kitploit: git clone https://github.com/vulnbe/poc-rebar3.git cd poc-rebar3 rebar3 clean Crediti Alexey Pronin @vulnbe Riferimenti Analisi della vulnerabilità di Rebar3 PR di correzione della vulnerabilità CVE-2020-13802 CWE-78:...

CVE-2026-76195

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could result in arbitrary code execution in the context of the current user. The vulnerability is exploitable over the network with low complexity , requires no prior authentication and no user interac...

CVE-2026-76195 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

CVE-2026-76197

Adobe Campaign Classic (ACC) is affected by an OS Command Injection vulnerability (CWE-78) that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation does not require user interaction, and the scope is changed, meaning the vulnerable componen...