479739 matches found
cve-2024-4577-phpcgi_rce_reproduction
CVE-2024-4577 - Iniezione di Argomenti CGI PHP su Windows "WorstFit" Panoramica CVE-2024-4577 ├и una vulnerabilit├а critica di esecuzione remota di codice nell'implementazione CGI di PHP su Windows. Bypassa la correzione della CVE-2012-1823 originale sfruttando la conversione delle code page...
wp2shell
wp2shell тАФ Pre-Auth RCE in WordPress Core Nicht authentifizierte WordPress Core RCE PoC, die CVE-2026-63030 + CVE-2026-60137 verkettet. Nur f├╝r autorisierte Tests. wp2shell.py ist ein Proof-of-Concept, bestehend aus einer einzigen Datei, das ausschlie├Яlich die Standardbibliothek nutzt und zwei...
CVE-2024-2997
CVE-2024-2997 рд╕реНрдХреИрдирд░ рдЕрд╡рд▓реЛрдХрди CVE-2024-2997 рд╕реНрдХреИрдирд░ рдПрдХ рдЙрдиреНрдирдд рднреЗрджреНрдпрддрд╛ рд╕реНрдХреИрдирд░ рд╣реИ рдЬрд┐рд╕реЗ рд╡реЗрдм рдЕрдиреБрдкреНрд░рдпреЛрдЧреЛрдВ рдореЗрдВ рдХрдорд╛рдВрдб рдЗрдВрдЬреЗрдХреНрд╢рди рднреЗрджреНрдпрддрд╛ рдХрд╛ рдкрддрд╛ рд▓рдЧрд╛рдиреЗ рдХреЗ рд▓рд┐рдП рдбрд┐рдЬрд╝рд╛рдЗрди рдХрд┐рдпрд╛ рдЧрдпрд╛ рд╣реИред рдпрд╣ рдЙрдкрдХрд░рдг рд╕реБрд░рдХреНрд╖рд╛ рдкреЗрд╢реЗрд╡рд░реЛрдВ рдХреЛ рдЙрдирдХреЗ рдЕрдиреБрдкреНрд░рдпреЛрдЧреЛрдВ рдореЗрдВ рд╕рдВрднрд╛рд╡рд┐рдд рд╕реБрд░рдХреНрд╖рд╛ рдЬреЛрдЦрд┐рдореЛрдВ рдХреА рдкрд╣рдЪрд╛рди рдХрд░рдиреЗ рдореЗрдВ рдорджрдж рдХрд░рддрд╛ рд╣реИред рдЕрд╕реНрд╡реАрдХрд░рдг рдпрд╣ рдЙрдкрдХрд░рдг рдХреЗрд╡рд▓...
EUVD-2026-67783
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...
CVE-2026-75123 PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_smtp_test_post
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The websmtptestpost handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization. A remote attacker with...
CVE-2026-75123
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_smtp_test_post handler incorporates a caller-supplied SMTP server value directly into a shell command without sanitization, allowing a remote attacker...
EUVD-2026-67782
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote...
CVE-2026-75122
PLANET GS-4210-16P2S firmware before 3.441b260626 is affected by an authenticated OS command injection in /cgi-bin/httpuploadcert.cgi . The certificate password field in a certificate upload request is passed to a shell command without sanitization of shell metacharacters, allowing a remote attac...
CVE-2026-75122 PLANET GS-4210-16P2S Command Injection via httpuploadcert.cgi
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote...
CVE-2026-75121
PLANET GS-4210-16P2S managed switches with firmware prior to 3.441b260626 are affected by an authenticated OS command injection in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_post handler incorporates the memberTags POST parameter directly into a shell command without sanitizatio...
CVE-2026-75121 PLANET GS-4210-16P2S Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_post
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The webvlanmembershipeditdialogpost handler incorporates the memberTags POST parameter into a shell command without sanitization. A remote authenticated...
EUVD-2026-67781
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The webvlanmembershipeditdialogpost handler incorporates the memberTags POST parameter into a shell command without sanitization. A remote authenticated...
CVE-2023-36845-Juniper-Vulnerability
CVE-2023-36845 Este script fornece uma Prova de Conceito PoC automatizada para CVE-2023-36845, uma vulnerabilidade que afeta o Junos OS da Juniper Networks em dispositivos das s├йries EX e SRX. Ela explora o componente J-Web, permitindo a modifica├з├гo remota da vari├бvel PHPRC e potencial inje├з├гo de...
CVE-2025-4396
CVE-2025-4396 - рд╡рд░реНрдбрдкреНрд░реЗрд╕ Relevanssi рд╕рдордп-рдЖрдзрд╛рд░рд┐рдд рдмреНрд▓рд╛рдЗрдВрдб SQL рдЗрдВрдЬреЗрдХреНрд╢рди рдЯреВрд▓рдХрд┐рдЯ рдЕрд╡рд▓реЛрдХрди рдЗрд╕ рд░рд┐рдкреЙрдЬрд┐рдЯрд░реА рдореЗрдВ CVE-2025-4396 рдХреЗ рд▓рд┐рдП рдПрдХ рд╡реНрдпрд╛рд╡рд╣рд╛рд░рд┐рдХ рдЕрдиреБрд╕рдВрдзрд╛рди рдФрд░ рд╕рддреНрдпрд╛рдкрди рдЯреВрд▓рдХрд┐рдЯ рд╣реИ, рдЬреЛ рд╡рд░реНрдбрдкреНрд░реЗрд╕ Relevanssi рдкреНрд▓рдЧрдЗрди рдХреЛ cats рдкреИрд░рд╛рдореАрдЯрд░ рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рдкреНрд░рднрд╛рд╡рд┐рдд рдХрд░рдиреЗ рд╡рд╛рд▓рд╛ рдПрдХ рдЕрдкреНрд░рдорд╛рдгрд┐рдд рд╕рдордп-рдЖрдзрд╛рд░рд┐рдд рдмреНрд▓рд╛рдЗрдВрдб SQL рдЗрдВрдЬреЗрдХреНрд╢рди рд╣реИред рдпрд╣...
CVE-2021-42667
CVE-2021-42667 CVE-2021-42667 - SQL-Injection-Schwachstelle im Online-Eventbuchungs- und Reservierungssystem Version 2.3.0. Technische Beschreibung: Eine SQL-Injection-Schwachstelle existiert in der Eventmanagement-Software Version 2.3.0. Ein Angreifer kann den anf├дlligen Parameter тАЮidтАЬ auf der...
CVE-2021-42666
CVE-2021-42666 CVE-2021-42666 - Vulnerabilidade de SQL Injection no sistema de portal online de Engenheiros. Descri├з├гo t├йcnica: Existe uma vulnerabilidade de SQL Injection no sistema de portal online de Engenheiros. Um atacante pode explorar o par├вmetro "id" vulner├бvel na p├бgina web...
claude-project-scanner
Scanner di progetti Claude Skill di Claude Code in sola lettura che analizza progetti di terze parti per individuare rischi di sicurezza noti prima di aprirli. Rileva i pattern di attacco documentati in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME...
CVE-2025-11953-PoC
╪з┘Д┘И╪╡┘Б ╪о╪з╪п┘Е ╪з┘Д╪к╪╖┘И┘К╪▒ Metro╪М ╪з┘Д╪░┘К ┘К┘Б╪к╪н┘З ┘И╪з╪м┘З╪й ╪г┘И╪з┘Е╪▒ React Native Community CLI╪М ┘К╪▒╪к╪и╪╖ ╪и╪з┘Д┘И╪з╪м┘З╪з╪к ╪з┘Д╪о╪з╪▒╪м┘К╪й ╪з┘Б╪к╪▒╪з╪╢┘К┘Л╪з. ┘К╪╣╪▒┘С╪╢ ╪з┘Д╪о╪з╪п┘Е ┘Ж┘В╪╖╪й ┘Ж┘З╪з┘К╪й ┘Е╪╣╪▒╪╢╪й ┘Д╪н┘В┘Ж ╪г┘И╪з┘Е╪▒ ┘Ж╪╕╪з┘Е ╪з┘Д╪к╪┤╪║┘К┘Д. ┘И┘З╪░╪з ┘К╪│┘Е╪н ┘Д┘Е┘З╪з╪м┘Е┘К ╪з┘Д╪┤╪и┘Г╪й ╪║┘К╪▒ ╪з┘Д┘Е╪╡╪з╪п┘В ╪╣┘Д┘К┘З┘Е ╪и╪е╪▒╪│╪з┘Д ╪╖┘Д╪и POST ╪е┘Д┘Й ╪з┘Д╪о╪з╪п┘Е ┘И╪к╪┤╪║┘К┘Д ┘Е┘Д┘Б╪з╪к ╪к┘Ж┘Б┘К╪░┘К╪й ╪╣╪┤┘И╪з╪ж┘К╪й. ╪╣┘Д┘Й ┘Ж╪╕╪з┘Е Windows╪М ┘К┘Е┘Г┘Ж...
wp2shell-scan
wp2shell-scan Ein Scanner und Proof-of-Concept-Toolkit f├╝r CVE-2026-63030 wp2shell, eine vorauthentifizierte Remote-Code-Ausf├╝hrungsschwachstelle im WordPress-Core Funktionen Zwei zerst├╢rungsfreie Erkennungsmethoden: --check-type time-based SLEEP-Timing und --check-type error-based...
bitbucket-test
Container Docker per investigare CVE-2022-36804 Ricreazione di una vulnerabilit├а di esecuzione remota di codice in cui Bitbucket non sanifica l'input dell'utente, consentendo agli attaccanti di iniettare flag Git ed eseguire codice in remoto. Questo repository documenta come ho riprodotto la...