CVE-2018-1270

CVE-2018-1270 - Spring messaging SpEL Code Execution Vulnerability Gestern hat Spring einen RCE-Schwachstelle veröffentlicht, mehr dazu: CVE-2018-1270: Remote Code Execution with spring-messaging Betroffene Versionen Spring Framework 5.0 bis 5.0.4 Spring Framework 4.3 bis 4.3.14 Diese Schwachstel...

CVE-2022-42889-PoC

CVE-2022-42889 उर्फ Text4Shell RCE प्रूफ ऑफ कॉन्सेप्ट Text4Shell Apache Commons Text लाइब्रेरी में पाई गई एक गंभीर सॉफ्टवेयर भेद्यता का लोकप्रिय नाम है देखें CVE-2022-42889. यह रेपो इस CVE का लाभ उठाने वाले रिमोट कोड एक्ज़ीक्यूशन RCE को प्रदर्शित करने के लिए है। कमजोर कोड एक SpringBoot कंट्रोलर म...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0 , the client_params.sh script—invoked by the openNDS daemon to serve the authenticated client status page—is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embed...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

EUVD-2026-67362

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

exploit_CVE-2022-26134

exploitCVE-2022-26134 CVE-2022-26134, ein OGNL-Injection-Schwachstelle existiert, die es einem nicht authentifizierten Angreifer ermöglicht, beliebigen Code auf einer Confluence Server- oder Data Center-Instanz auszuführen. Dieses Skript kann verwundbare Server für CVE-2022-26134 über die...

CVE-2018-14714-POC

CVE-2018-14714-POC Apr 25 2020, Altin Thartori, github.com/tin-z Dettagli della vulnerabilità Iniezione di comandi di sistema in appGet.cgi su ASUS RT-AC3200 versione 3.0.0.4.382.50010 consente agli aggressori di eseguire comandi di sistema tramite il parametro URL "loadscript" Riferimenti per...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php iniezione SQL NOME DEI PRODOTTI AFFETTI AVL Rooms Homepage del fornitore https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ segnalatore dazhi File vulnerabile /city.php VERSIONEI V1.0 Link del software...

CVE-2025-7605

CVE-2025-7605 code-projects AVL Rooms Project V1.0/profile.php injeção SQL NOME DOS PRODUTOS AFETADOS AVL Rooms Homepage do Fornecedor https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ Submetido por dazhi Arquivo Vulnerável /profile.php VERSÃOÕES V1.0 Link do...

CVE-2025-55182

CVE-2025-55182 RCE Ferramenta de verificação pessoal para verificar a vulnerabilidade CVE-2025-55182 Princípio da vulnerabilidade Os React Server Components, ao decodificar o payload enviado ao endpoint da função do servidor, apresentam uma falha na resolução de caminhos. Eles usam dois pontos pa...

CVE-2019-14339

CVE-2019-14339 Content Provider URI Injection auf Canon PRINT 2.5.5 CVE-2019-14339. Proof of Concept von @0x48piraj Der ContentProvider in der Canon PRINT 2.5.5 -App für Android schränkt den Datenzugriff nicht ordnungsgemäß ein. Dadurch kann eine bösartige App eines Angreifers sensible...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html o logo.gif será excluído...

CVE-2024-43917

CVE-2024-43917 Ein Proof of Concept zur Ausnutzung von CVE-2024-43917. Basierend auf PatchStacks Artikel. Verwendung root@kitploit: usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute...

CVE-2026-38820

openNDS versions before 11.0.0 are susceptible to unauthenticated OS command execution due to a shell command injection vulnerability in libopennds.sh . The flaw is triggered through the fas query parameter on the /opennds_preauth/ endpoint, allowing an attacker on an adjacent network to execute ...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

EUVD-2026-67360

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...