300484 matches found
CVE-2021-32159
..| CSRFtoCommandInjection1 |.. Descrizione : Sfruttare un attacco Cross-site request forgery CSRF per ottenere una Command Injection tramite la funzionalità Upload and Download di Webmin Versione testata : Webmin 1.973 ultima versione di GitHub 07/03/2021 Tipo di attacco: Remoto Impatto :...
the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt
CVE-2026-71960 — Segreto JWT hard-coded nel broker MQTT del mesh Cudy WR3000 2.0 Strumenti PoC per l'articolo Hunt-Benito "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...
CVE-2026-57998 better-npm-audit OS Command Injection via registry flag
better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...
CVE-2026-57998 better-npm-audit OS Command Injection via registry flag
better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...
CVE-2026-57998 better-npm-audit OS Command Injection via registry flag
better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...
EUVD-2026-64261
better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...
CVE-2026-57998
better-npm-audit (npm package) through 3.11.0 and the 4.0.0-rc.2 prerelease is vulnerable to OS command injection via the --registry option. The user-supplied registry value is interpolated into a command string in src/handlers/handleInput.ts without validation or quoting, then passed to child_pr...
CVE-2026-77988
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
Exploit for CVE-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injec...
CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
CVE-2026-77988
A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...
CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
EUVD-2026-64252
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...
cve-2026-71362-magento-lab
CVE-2026-71362 — Magento / Adobe Commerce Labor zum Identitätswechsel der Kundensitzung Ein in sich geschlossenes Docker-Labor mit einem einzigen Befehl, das CVE-2026-71362 Ende-zu-Ende reproduziert und es Ihnen ermöglicht, Adobes Fix zu verifizieren, damit Verteidiger, Forscher und Studenten ein...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
UniFi OS CVE Proof of Concept Proof of concept untuk pengujia...
CVE-2026-77946
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...
CVE-2026-77945
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...
CVE-2026-77946
A stack-based buffer overflow in the NTP Timezone Configuration Handler of TRENDnet TEW-821DAP firmware 2.2.01b05 allows remote, unauthenticated attackers to achieve full system compromise (CVSS 10.0 CRITICAL). The vulnerable function is uci_safe_get in /cgi-bin/apply_time.cgi ; manipulating the ...
CVE-2026-77946 TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...
EUVD-2026-64247
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...