14812 matches found
cve-2017-5123
CVE-2017-5123 This repository contains a demonstration of CVE-2017-5123 , an ICMP command-and-control backdoor, and a CWE-78 OS Command Injection vulnerable web app. Part of CSC 4308 - Challenge 3. Prerequisites Linux Kernel : 4.13 up to but excluding 4.13.7 Node.js : 10.x npm : 6.x Overview This...
CVE-2024-53376
CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...
CVE-2024-3400
CVE-2024-3400: OS Command Injection Vulnerability in GlobalProtect Gateway Severity: CRITICAL 10/10 ⚠️...
CVE-2022-36779
CVE-2022-36779 exploit code for Unauthenticated OS Command Injection Proscend at Industrial Cellular Router. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.html...
blogpost_cve-2018-19987-analysis
CVE-2018-19987 D-Link OS command injection analysis Hello there! In this short blog post I'll break down a quick analysis that I performed to better understand the details behind CVE-2018-19987. At the beginning I went after this CVE because I thought that there wasn't any public information or...
CVE-2020-27976
CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...
cve-2019-14514
CVEID : CVE-2019-14514 Name of the affected products and versions : Microvirt MEmu all versions prior to 7.0.2 Problem type : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' Summary MEmu is an Android emulator for Windows. During our tests, we have...
CVE-2019-25065-exploit
CVE-2019-25065 - POC This is a POC of CVE-2019-25065 - OS command injection in OpenNetAdmin v18.1.1 The exploit is written in bash, it supports linux environment. was tested on kali linux 2024.4, and Ubuntu 22.04.5 LTS dependencies: gridsite-clients debian package...
CVE-2025-26055
CVE-2025-26055 CVE Description Author : Rohan Deshpande OS Command Injection Summary OS command injection is a security vulnerability that allows an attacker to execute arbitrary commands on a host operating system via a vulnerable application. This can lead to unauthorized access, data breaches,...
CVE-2022-25064
CVE-2022-25064 This script exploits a OS Command Injection vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol...
CVE-2019-19919
CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...
CVE-2020-2034-POC
CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...
CVE-2026-105110
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter...
CVE-2021-22123
CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...
CVE-2026-105110
The Iskratel Innbox GPON ONT devices are vulnerable to OS Command Injection in the login.xgi CGI endpoint . This vulnerability allows an unauthenticated remote attacker to execute arbitrary commands with root privileges by exploiting the CLI parameter . The impact is critical, potentially leading...
EUVD-2026-94812
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter...
CVE-2026-105110 Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter
OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter...
CVE-2019-19609
Strapi CMS Exploit This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution RCE. Vulnerabilities CVE-2019-18818 Weak Password Recovery Mechanism for Forgotten Password CVSS : 9.8 - Critical More details:...
CVE-2023-33381-MitraStar-GPT-2741GNAC
CVE-2023-33381-MitraStar-GPT-2741GNAC CVE-2023-33381: OS command injection on MitraStar GPT-2741GNAC Device: GPT-2741GNAC Firmware Version: ARg5.8110WVN0b72 Vulnerability Description: Upon logging in via SSH, I immediately noticed the limited set of available commands and options. It became evide...
