CVE-2026-108744

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

CVE-2026-108576

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function processping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about th...

CVE-2026-108744

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

CVE-2026-108744 pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

CVE-2026-108576

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function processping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about th...

CVE-2026-108576 TOZED X300 IPPingDiagnostics process_ping os command injection

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function processping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about th...

Exploit for OS Command Injection in Olivetin

CVE-2026-27626: OliveTin OS Command Injection !CVE-2026-2762...

JLF-APIDB

JLF-APIDB Designed by jakelo.ai · Coded with AI assistanc...

Exploit for CVE-2026-107406

CVE-2026-107406 – Citrix NetScaler ADC/Gateway SAML Memory Ove...

CVE-2026-108540

A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. The...

SQLC2

SQLC2 SQLC2는 SQL Server를 제어 서버와 에이전트로 동시에 사용하는 명령 및 제어 시스템을 배포하고 관리하기 위한 PowerShell 스크립트입니다. 핵심적으로 SQLC2는 단순한 PowerShell 스크립트, TSQL 스크립트, 그리고 에이전트·명령·결과를 추적하는 SQL Server 인스턴스 내 몇 개의 테이블로 구성됩니다. 특별히 화려한 것은 아니지만 일부 엔게이지먼트에서는 유용하게 쓰일 수 있습니다. SQLC2에 대한 보다 자세한 개요는...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

ipChecker

ipChecker 주어진 IP가 Tor 노드인지 공개 프록시인지 확인하는 도구입니다. 왜? 때로는 모든 속도 제한만으로는 무차별 대입 공격이나 대규모 공격을 막기에 충분하지 않을 수 있습니다. 이 도구는 Tor나 공개 프록시를 사용하는 일부 공격자를 차단하는 데 도움을 줄 수 있습니다. 작동 방식 ipChecker는 공개 사이트에서 프록시 IP를 수집하는 여러 플러그인을 가지고 있습니다. 이 모든 IP는 제공된 API를 사용하여 조회할 수 있는 데이터베이스에 저장됩니다. 기본적으로 make run 명령을 실행하면 docker...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

ntfstool

ntfstool NTFSTool — это криминалистический инструмент, ориентированный на тома NTFS. Он поддерживает чтение информации о разделах MBR, таблица разделов, VBR, а также информацию о главной файловой таблице, зашифрованном томе Bitlocker, зашифрованных файлах EFS, журнале USN и многое другое. Загрузи...

CVE-2024-23897

CVE-2024-23897 | Jenkins -p -f или python CVE-2024-23897.py -i -f Параметры: -t или --target: Укажите целевой IP-адреса. Поддерживает одиночный IP, диапазон IP, список через запятую или блок CIDR. -i или --input-file: Путь к входному файлу, содержащему хосты в формате http://1.2.3.4:8080/ по одно...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

mad-metasploit

Metasploitのカスタムモジュール、プラグイン、リソーススクリプト、そして素晴らしいMetasploitコレクション https://www.hahwul.com/p/mad-metasploit.html Awesome awesome.md を開く mad-metasploitをMetasploitフレームワークに追加 1. metasploit-frameworkディレクトリを設定 $ vim config/config.rb $metasploitpath = '/opt/metasploit-framework/embedded/framework/'...

ZEROScan

ZEROScan Описание ZEROScan — это многопоточный фреймворк для обнаружения уязвимостей. С его помощью можно легко получать или разрабатывать плагины для обнаружения уязвимостей и проводить пентест целей. Интерфейс и способ использования заимствованы из фреймворка metasploit-framework, что делает ег...