CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-19843

CVE-2026-19843 is a command injection flaw in 389-ds-base . The Cockpit 389 Console LDAP editor embeds an LDAP distinguished name (DN) into a shell command without proper escaping. An LDAP user with delegated privileges can craft a malicious DN with shell metacharacters; when a Cockpit administra...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

POC-CVE-2026-19681

CVE-2026-19681 — 파일 업로드 처리의 명령 삽입 인증 필요 상태: 확인됨 — 6.7.2-14.el9 랩 환경2026-08-20에서 확인됨. POST /rest/file/upload를 통해 스테이징된 파일 이름 p;sleep$IFS20;-EvvfJk컨텍스트 접두사에 메타문자가 포함됨를 업로드한 다음 POST /rest/auditFiletype=scapLinux, version=1.2을 호출했더니 정확히 20.1초 동안 지연된 후 오류 106"Error adding Tailoring file to SCAP zip...

Websvn <2.6.1 - Remote Code Execution

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. id: CVE-2021-32305 info: name: Websvn 2.6.1 - Remote Code Execution author: gy741 severity: critical description: WebSVN before 2.6.1 allows remote attackers to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-19843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into ...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 익스플로잇 Username Map Script 이 저장소는 Samba 서버버전 3.0.203.0.25rc3에서 CVE-2007-2447 취약점의 악용을 자동화하도록 설계된 Python 스크립트를 포함합니다. 이 도구는 오로지 교육적 목적과 승인된 침투 테스트를 위해 개발되었습니다. 📝 기술·학술적 설명 "Username Map Script" 취약점은 Samba 구성에서 username map script 옵션이 활성화된 경우 사용자 이름 입력에 대한 검증새니타이제이션이 부족하여 발생합니다. ...

DrayTek - Remote Code Execution

DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta devices allow remote code execution as root without authentication via shell metacharacters to the cgi-bin/mainfunction.cgi URI. id: CVE-2020-8515 info: name: DrayTek - Remote Code Execution...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

CVE-2019-19781

CVE-2019-19781 캐시 뒤에 있는 Citrix를 위한 python3 CVE-2019-19781 익스플로잇입니다. 이 버전은 '', '|', '2&1' ... 등을 허용합니다. 사용법 python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' 할 일 응답에 Age 헤더가 있으면 반복합니다. 연속 모드 -c. 확인 모드 Get /vpn/../vpns/cfg/smb.conf...

CVE-2020-35713

Описание Устройства Belkin LINKSYS RE6500 до версии 1.0.012.001 позволяют удалённым злоумышленникам выполнять произвольные команды или устанавливать новый пароль с помощью метасимволов оболочки на странице goform/setSysAdm. Как использовать Шаг 1: Измените IP-адрес в файле cve-2020-35713.py на...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Внедрение команд через имя задания печати Samba Обзор CVE-2026-4480 — это уязвимость внедрения команд, затрагивающая определенные конфигурации печати Samba, использующие внешние команды печати. Уязвимость существует из-за того, что Samba вставляет управляемые...

EUVD-2026-70801

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

PT-2026-85582

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

CVE-2026-85426

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls...

CVE-2026-85439 MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a command injection vulnerability in alogsplit 's SplitHandler::handlePreCheckSplitDir() function, which fails to sanitize shell metacharacters in log file pathnames. An attacker can embed shell syntax in log file names or the --dir parameter to execute arbitrary ...

CVE-2026-85439 MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

CVE-2026-85426 MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client names to execute arbitrary commands as the uMemWatch process user through unquoted redirection targets in system calls...