31 matches found
CVE-2025-37164-PoC
CVE-2025-37164 - HPE OneView 未认证 RCE PoC 这是 CVE-2025-37164 的概念验证（PoC）利用程序，该漏洞是 HPE OneView 中的一个严重（CVSS 10.0）未认证远程代码执行漏洞。 免责声明 本软件仅供教育和授权安全测试目的使用。 仅可在您拥有或已获得明确书面许可的系统上使用 未经授权访问计算机系统属于违法行为 作者不对因使用本工具而造成的任何滥用或损害负责 本工具用于受控环境中的防御性安全研究和渗透测试 漏洞详情 CVE ID ：CVE-2025-37164 CVSS 分数 ：10.0（严重） 厂商 ：Hewlett...
CVE-2025-68613
CVE-2025-68613 — n8n RCE via Expression Injection（通过表达式注入实现的远程代码执行） 仅限教育和授权安全研究用途。 概述 n8n 工作流自动化平台中存在的严重 RCE 漏洞（CVSS 9.9）。已验证用户可通过 executeCommand 节点绕过沙箱限制，执行任意操作系统命令。 字段| 详情 ---|--- CVE| CVE-2025-68613 CVSS| 9.9（严重） 受影响版本| = 0.211.0 示例： root@kitploit: 基础 RCE bash pocfinal.sh http://target:5678...
CVE-2026-86182
A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument dmcommand causes cross-site request forgery. The attack may...
CVE-2026-86182
CVE-2026-86182 is a cross-site request forgery (CSRF) vulnerability in diem-project diem up to version 5.1.3 . The flaw resides in the executeCommand function within the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php (component dmConsole ), where manipulation of the dm_command arg...
CVE-2026-86182 diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery
A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument dmcommand causes cross-site request forgery. The attack may...
CVE-2026-86182 diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery
A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument dmcommand causes cross-site request forgery. The attack may...
CVE-2026-82678 diem-project diem Administrative Console actions.class.php executeCommand os command injection
A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. Such manipulation of the argument dmcommand leads to os command...
CVE-2026-82678
diem-project diem (up to 5.1.3 ) contains an OS command injection vulnerability in the Administrative Console component. The affected element is the executeCommand function in dmAdminPlugin/modules/dmConsole/actions/actions.class.php , where manipulation of the dm_command argument allows command ...
CVE-2026-19047 NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection
A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component luduscliexecute. Performing a manipulation of the argument command/args results in command injection. The...
CVE-2026-19047
The CVE covers NocteDefensor LudusMCP up to 1.0.24. The vulnerability resides in the function executeArbitraryCommand/executeCommand within src/ludusMCP/cliWrapper.ts of the ludus_cli_execute component, where manipulating the command/args enables a command injection. This is described as a LOCAL ...
Exploit for Improper Control of Dynamically-Managed Code Resources in N8N
CVE-2025-68613 — n8n RCE via Expression Injection For edu...
CVE-2026-0759
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this...
CVE-2026-0759 Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this...
CVE-2026-0759 Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this...
CVE-2026-0759
The CVE-2026-0759 entry concerns Katana Network Development Starter Kit. A command-injection flaw exists in the executeCommand function where user-supplied input is not properly validated before being used to form a system call, allowing remote attackers to execute code with the service account. ...
CVE-2026-0759
Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this...
Katana Development Starter Kit: Operating System Command Injection Vulnerability
The Katana Development Starter Kit is an open-source development kit developed by Katana Network. The Katana Development Starter Kit has a vulnerability related to operating system command injection. This vulnerability stems from the executeCommand method, which lacks validation of the strings...
PT-2026-1989
Name of the Vulnerable Software and Affected Versions Katana Network Development Starter Kit affected versions not specified Description The Katana Network Development Starter Kit contains a command injection flaw in the executeCommand function, potentially allowing remote code execution. The iss...
(0Day) Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Katana Network Development Starter Kit. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the executeCommand method. The issue result...