cve-2017-5123

CVE-2017-5123 Этот репозиторий содержит демонстрацию CVE-2017-5123 , ICMP-бэкдора с командным управлением, и веб-приложения, уязвимого к CWE-78 внедрение команд ОС. Часть CSC 4308 – Challenge 3. Предварительные требования Ядро Linux : 4.13 до но не включая 4.13.7 Node.js : 10.x npm : 6.x Обзор Эт...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoC 시뮬레이션 개요 이 저장소는 Nginx Proxy Manager에서 OS 명령 주입을 가능하게 하여 인증 후 원격 코드 실행RCE으로 이어지는 두 가지 취약점을 시뮬레이션하는 단계별 이미지 기반 개념 증명PoC 자료입니다. 영향받는 제품: Nginx Proxy Manager 영향받는 버전: v2.11.3 영향: 인증된 RCE PoC에서 루트 권한으로 확인됨 내용 POC.md: 페이로드 및 관찰 결과를 포함한 분석 및 악용 절차에 대한 상세 문서. static/...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

VulnCheck KEV: CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

PT-2026-84519

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-79408

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuildclassviews in metagpt/repoparser.py...

CVE-2026-14802

CVE-2026-14802 Название уязвимого программного обеспечения и затронутые версии create-react-app версии до 5.0.2 Описание В macOS функция startBrowserProcess в файле openBrowser.js компонента react-dev-utils допускает внедрение команд операционной системы. Эта проблема позволяет удалённую...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: OS command injection via runnmapscan The runnmapscan MCP tool builds its command by string interpolation of the target and additionalFlags parameters and runs it through childprocess.exec, i.e. /bin/sh -c. ⚠ Read this first — duplicate identifier This vulnerabili...

CVE-2025-32375

취약 버전 설정. 취약 컨테이너를 시작합니다: root@kitploit: docker compose up 리스너를 생성합니다 예: ncat: root@kitploit: ncat -klnv 1337 익스플로잇을 실행합니다: root@kitploit: python3 exploit.py 모든 것이 예상대로 작동했다면 ncat 창에서 OS 명령id가 기본값의 내용이 포함된 HTTP 요청을 받게 됩니다. 크레딧 SeaW1nd님이 발견한 취약점 VickyTheViking의 테스트 설정을 기반으로 함...

CVE-2026-28672

CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder: внедрение команд ОС Рабочий proof-of-concept, воспроизводящий внедрение команд ОС в модуль user-sync Apache Ranger unixusersync. При перечислении групп каждого синхронизируемого пользователя UnixUserGroupBuilder выполняет команду id через...

CVE-2026-82703

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component aspsetPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

CVE-2026-82702

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-59111

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

CVE-2026-82703

An OS command injection vulnerability exists in Edimax BR-6214K firmware 1.40 , specifically in the asp_setPing endpoint within www/ping.asp. The system function processes the pingstr argument without proper sanitization, allowing a remote, high-privileged attacker to inject and execute arbitrary...

CVE-2026-82703 Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injection

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component aspsetPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

EUVD-2026-68576

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component aspsetPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

CVE-2026-59111 Command Injection vulnerability in eObčanka-Identifikace

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...