53 matches found
mediawiki-CVE-2026-100382
ラボ再現 - CVE-2026-100382 ExternalData OS コマンドインジェクション このラボについて MediaWiki 1.43 公式イメージ、SQLite + ExternalData3.6.1 最後の脆弱バージョン、 ../mediawiki-extensions-ExternalData から読み取り専用でマウント。 ループバックのみ: 127.0.0.1:$HOSTPORT デフォルト 8080 で公開。 匿名編集 + action=parse が有効 MediaWiki のデフォルト - PoC にログインは不要 。 実行 cd lab ./up.sh...
CVE-2026-52806
Gogs RCE — git rebase における引数インジェクション CWE-88 プルリクエストのマージフローにおける引数インジェクションを介した、Gogs という名前のブランチは、位置引数ではなく Git によって --exec フラグとして解析され、リベース中に再生された各コミットの後に sh -c が実行されます。 エクスプロイトの仕組み 1. 事前確認 Pre-flight — ターゲットが Gogs を実行しているか判定し、静的アセットの ?v= パラメータでバージョンを特定し、ユーザー登録がオープンか、CAPTCHA 保護付きか、無効かを確認します。 2. 認証 —...
CVE-2026-8044
CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...
CVE-2026-8044
CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...
PT-2026-89083
CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...
CVE-2020-7496
A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause unauthorized write access when opening the project file...
EUVD-2020-28621
Malware in sbrugna...
EUVD-2025-17400
Malicious code in bioql PyPI...
EUVD-2025-17412
Malicious code in bioql PyPI...
EUVD-2025-17398
Malicious code in bioql PyPI...
EUVD-2025-17408
Malicious code in bioql PyPI...
EUVD-2025-17403
Malicious code in bioql PyPI...
EUVD-2025-17401
Malicious code in bioql PyPI...
EUVD-2025-17399
Malicious code in bioql PyPI...
CVE-2025-3460
The Quantenna Wi-Fi chipset ships with a local control script, settxpow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'," and is estimated as a CVSS 7.7...
CVE-2025-35010
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...
CVE-2025-32459
The Quantenna Wi-Fi chipset ships with a local control script, routercommand.sh in the synctime argument, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'," and is estimated as a CVSS 7.7...
CVE-2025-35004
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument...
CVE-2025-35008
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...
CVE-2025-35008
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...