Fullhan FH8626V100 Command Injection / Secret Disclosure

Fullhan FH8626V100 suffers from command injection, secret disclosure, and multiple other vulnerabilities. Exploit Title: Fullhan FH8626V100 - Multiple Vulnerabilities Date: 31-03-2026 Exploit Author: Amir Aliu Vendor Homepage: https://www.fullhan.com/ Software Link: N/A - OEM/whitelabel IP camera...

CVE-2026-84838

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...

Exiv2 < 0.28.9 Multiple Vulnerabilities

The version of Exiv2 installed on the remote host is prior to 0.28.9. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write was found in RemoteIo::Impl::populateBlocks. The bug is in the RemoteIo class, which is only used when Exiv2 is run on a URL, rather than a local...

Metabase 0.61.0 - Authenticated Remote Code Execution

Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution Date: 2026-08-12 Exploit Author: Gutierre0x80 Vendor Homepage: https://www.metabase.com/ Software Link: https://github.com/metabase/metabase Version: = 0.58.0 = 0.59.0 = 0.60.0 = 0.61.0 Example: python3 exploit.py...

PT-2026-85258

IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

Linux Distros Unpatched Vulnerability : CVE-2026-84372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on aggregate cluster an...

PT-2026-85071

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...

PT-2026-85050

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification unless the calling code explicitly...

Linux Distros Unpatched Vulnerability : CVE-2026-84838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress...

Linux Distros Unpatched Vulnerability : CVE-2026-84361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an...

Linux Distros Unpatched Vulnerability : CVE-2026-84366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler...

PT-2026-84956

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges...

Metabase 0.61.0 Remote Code Execution

Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned by native H2 queries in result columns of type OTHER without validation. An authenticated user with permission to execute native queries against an accessible H2...

...[ More ]

This Metasploit module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitra...

FreePBX 17.0.2 - Remote Code Execution (RCE)

Exploit Title: FreePBX 17.0.2 - Remote Code Execution Date: 2026-08-12 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.freepbx.org/ Software Link: https://github.com/FreePBX/freepbx Version: FreePBX 15.x 15.0.66, 16.x 16.0.89, 17.x 17.0.3 Tested on: Linux Debian/Ubuntu with...

CVE-2025-47812-PoC

CVE-2025-47812 — Wing FTP Server 远程代码执行 RCE 概述 字段| 值 ---|--- CVE| CVE-2025-47812 影响版本| Wing FTP Server 7.4.4 类型| 未认证远程代码执行 CVSS 评分| 10.0（严重） 修复版本| Wing FTP Server 7.4.4 工作原理 漏洞存在于 /loginok.html 登录端点。服务器未能正确过滤 username 字段中的空字节（%00）。攻击者可以利用这一点将任意的 Lua 代码 注入到会话文件中，这些文件随后在访问 /dir.html...

CVE-2022-42889

🚀 CVE-2022-42889 Text4Shell エクスプロイト CVE-2022-42889 Text4Shell の Python エクスプロイトです。Apache Commons Text のバージョン 1.10.0 未満における重大なリモートコード実行脆弱性です。 📋 目次 説明 脆弱性の詳細 影響を受けるバージョン エクスプロイトの機能 必要条件 使用方法 使用例 動作の仕組み 検出方法 緩和策 参考文献 免責事項 📝 説明 このエクスプロイトは、CVE-2022-42889 Text4Shell を標的としています。これは Apache Commons Text...

CVE-2026-18718 — Updated!

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

CVE-2026-39047

PrintHack - プリンタセキュリティテストツール root@kitploit: | | | | | | \ | \ | | | | | | | | | | | | | | | | | ⚠️ 免責事項 : このツールは正当なセキュリティテスト および教育目的のみ を意図しています。所有しているシステム、または明示的なテスト許可を得たシステムでのみ責任を持って使用してください。 🎯 機能 コア機能 🔌 生ソケット印刷 - ポート9100を介したプリンタとの直接通信 📄 PCLペイロード配信 - Printer Command Languageペイロードの送信 🖼️...

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...