EUVD-2026-64010

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the commandcollector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

CVE-2026-41450

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function. The root cause is that foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with e...

CVE-2026-41450 UAC < 3.3.0 Command Injection via command_collector.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the commandcollector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

CVE-2026-41449 UAC < 3.3.0 Command Injection via run_command.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

CVE-2026-41449 UAC < 3.3.0 Command Injection via run_command.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

CVE-2026-41449 UAC < 3.3.0 Command Injection via run_command.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

CVE-2026-41449

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 are affected by a command injection vulnerability in the _run_command function. The root cause is the failure to sanitize untrusted data—such as usernames, process names, or filenames—before passing it to shell execution, allowing attack...

EUVD-2026-64009

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

Exploit for Improper Access Control in Widgetfactorylimited Jce

JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...

dissect.cobaltstrike

Cobalt Strike mit Python analysieren .. image:: https://github.com/fox-it/dissect.cobaltstrike/workflows/Tests/badge.svg :target: https://github.com/fox-it/dissect.cobaltstrike/actions :alt: GitHub Actions status .. image:: https://readthedocs.org/projects/dissect-cobaltstrike/badge/?version=late...

dsh2shell

dsh2shell Unauthenticated RCE PoC for expo...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Diversi modelli di router ASUS includono un servizio chiamato infosvr che resta in ascolto sulla porta broadcast UDP 9999 sull'interfaccia LAN o WLAN. Viene utilizzato da uno strumento ASUS per facilitare la configurazione del router...

Exploit for CVE-2026-58455

CVE-2026-58455 — Dockwatch Unauthenticated RCE auth bypass +...

RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis

1. Connessione C2 – IP 198.46.86.63 L'analisi di rete rivela che RedLine Stealer stabilisce una connessione all'indirizzo IP remoto 198.46.86.63. Questo IP è probabilmente il server Command & Control C2 del malware, utilizzato per l'esfiltrazione dei dati e l'invio di comandi. Osservazioni...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.1.2 Vulnerability Details CVEID:CVE-2022-40152 DESCRIPTION: Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks DOS if DTD support is enabled. If the parser is running on user suppli...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

-CVE-2014-6271-Shellshock-Remote-Command-Injection-

CVE-2014-6271 Shellshock-Remote-Command-Injection CVE-2014-6271 Apache Shellshock रिमोट कमांड इंजेक्शन टूल त्वरित रिवर्स शेल और फ़ाइल ब्राउज़िंग के लिए root@kitploit: Shellshock Apache remote exploit Usage: ./Shellshock.py payload=reverse rhost=1.2.3.4 page=3 lhost=5.6.7.8 lport=1234...

retire.js v5.5.0

Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...

spaces-finder

Spaces finder Spaces finder ist ein Tool, um DigitalOcean Spaces schnell zu durchsuchen und nach Beute zu suchen. Es ähnelt einem Subdomain-Bruteforcer, ist aber speziell für DigitalOcean Spaces entwickelt und bietet zusätzliche Funktionen, mit denen du nach interessanten Dateien grep-en und...

Malbait

Malbait TCP/UDP-Honeypot-Programm, implementiert in Perl README für Malbait, 2/10/17 Übrigens, meine Bitcoin-Adresse ist 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Hier ist eine Alternative, ebenfalls für BTC, da ich Berichte bekommen habe, dass einige Bitcoin-Wallets bestimmte Adressen nicht unterstütze...