ASLRay

ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...

gha-lab-23db52563c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of nrwl/nx at commit...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

secpub

Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. Discovered by: Peter Adkins [email protected] Access: Local; authenticated access is required. Tracking and identifiers: CVE - CVE-2011-2569 OS' Affected: Cisco Nexus OS NX-OS Vendor involvement: Alerted - patches available /...

exec-prot-bypass

Executable Space Protection Bypass CVE-2022-25265 This POC demonstrates execution of bytes located in supposedly non-executable region of binary, therefore completely bypassing executable-space protection. The root cause of this can be found here:...

CVE-2013-2028-x64-bypass-ssp-and-pie-PoC

for bypass NX PIE SSP ASLR this poc is not stable. sometimes http service will down. you should fix morecore-offset and chose correct libc-file...

CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HTTP cookie'...

CTFs

CTF Writeups Hey there, I'm Sean and I enjoy doing CTF problems in my spare time. My current position has me doing a lot of binary exploitation and software reverse engineering so I tend to focus on those categories. Most writeups that I see online suck and I hope these do a better job explaining...

CVE-2026-119282

A flaw was found in Nx. The project-graph analyzers in the Maven and Gradle plugins interpolate workspace configuration options directly into shell command arguments without adequate sanitization. An attacker who convinces a user to run Nx within a malicious repository or pull request can exploit...

Cisco UCS Manager Command Injection (cisco-sa-nxos-cmdinj-qhNze5Ss)

According to its self-reported version, Cisco UCS Manager is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit th...

Cisco NX-OS Software Command Injection (cisco-sa-nxos-cmdinj-qhNze5Ss)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit...

EUVD-2026-113391

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options...

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options

Summary @nx/maven and @nx/gradle spawn their project-graph analyzers through a shell and interpolate plugin options read from nx.json straight into the command line. Because a shell parses the whole line, an option value containing shell syntax is executed as a command by any nx command that...

GHSA-QM8W-VX34-5J9J @nx/maven and @nx/gradle have OS command injection via nx.json plugin options

Summary @nx/maven and @nx/gradle spawn their project-graph analyzers through a shell and interpolate plugin options read from nx.json straight into the command line. Because a shell parses the whole line, an option value containing shell syntax is executed as a command by any nx command that...

Command Injection

Overview @nx/maven is a Nx plugin for Maven integration Affected versions of this package are vulnerable to Command Injection via maven-analyzer.ts and related spawn utilities in @nx/maven and @nx/gradle, which invoke child processes with shell: true and interpolate values read from nx.json...

Command Injection

Overview @nx/node is an AI-first build platform that connects everything from your editor to CI. Helping you deliver fast, without breaking things. Affected versions of this package are vulnerable to Command Injection via maven-analyzer.ts and related spawn utilities in @nx/maven and @nx/gradle,...

CVE-2026-119282

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...

CVE-2026-119282 Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...

CVE-2026-119282

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...

CVE-2026-119282 Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the plugins' project-graph analyzers launch through a shell and interpolate plugin options from nx.json into command argument...