rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

Advantech R-SeeNet 2.4.12 - OS Command Injection

Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...

MajorDoMo thumb.php - OS Command Injection

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. id: CVE-2023-50917 info: name: MajorDoMo thumb.php - OS Command Injection author: DhiyaneshDK severity: critical...

cPH2 Charging Station v1.87.0 - OS Command Injection

An OS command injection vulnerability in Hardy Barth cPH2 Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature. id: CVE-2023-46359 info: name: cPH2...

WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection

A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...

Pheditor 2.0.1-2.0.3 - OS Command Injection

Pheditor 2.0.1 to - 2.0.4 contains an OS command injection caused by improper sanitization of the 'dir' POST parameter in the terminal action handler, letting authenticated users execute arbitrary OS commands with web server privileges. id: CVE-2026-48030 info: name: Pheditor 2.0.1-2.0.3 - OS...

Node.js Embedded JavaScript 3.1.6 - Template Injection

Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settingsview optionsoutputFunctionName, which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation. id:...

HuangDou UTCMS V9 - OS Command Injection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

blogpost_cve-2018-19987-analysis

Analisi di CVE-2018-19987 Iniezione di comandi OS D-Link Ciao a tutti! In questo breve post del blog analizzerò una rapida analisi che ho svolto per comprendere meglio i dettagli dietro CVE-2018-19987. All'inizio ho cercato questa CVE perché pensavo che non ci fossero informazioni pubbliche o...

CVE-2019-17625

CVE-2019-17625 Esiste una vulnerabilità XSS persistente in rambox 0.6.9 dovuta a parametri non sanificati nel campo nome quando un utente aggiunge un servizio. Poiché rambox gira su NodeJS, ciò consente di iniettare comandi del sistema operativo in un tag o . Nota: Questo codice è stato testato...

CVE-2024-53376

CVE-2024-53376 Injeção de Comandos do SO Autenticada no CyberPanel Dispositivos Afetados As versões do CyberPanel 2.3.8 são vulneráveis a uma injeção de comandos do SO. Para explorar a vulnerabilidade, o atacante precisa primeiro fazer login no painel web. Testado Com CyberPanel 2.3.7 Detalhes...

CVE-2024-8190-unauth

CVE-2024-8190 non autenticato Descrizione Combinazione di CVE-2024-8963 e CVE-2024-8190 - PoC per RCE non autenticata su Ivanti CSA 4.6 e versioni precedenti. CVE-2024-8963 Il Path Traversal in Ivanti CSA precedente alla 4.6 Patch 519 consente a un attaccante remoto non autenticato di accedere a...

CVE-2019-19609

Strapi CMS Exploit Dieser Exploit zielt auf zwei Schwachstellen im Strapi CMS Framework Version 3.0.0-beta-17.4 ab, die eine nicht authentifizierte Remotecodeausführung RCE ermöglichen. Schwachstellen CVE-2019-18818 Schwacher Mechanismus zur Wiederherstellung vergessener Passwörter CVSS : 9.8 -...

CVE-2020-2034-POC

CVE-2020-2034-POC Bestimmen Sie die auf der Palo Alto Network Firewall ausgeführte Version für das Global Protect Portal Kürzlich wurden von Palo Alto Networks eine Reihe kritischer Schwachstellen veröffentlicht: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Modulo Metasploit Modulo Metasploit per InfoBlox Network Automation: iniezione di comandi del sistema operativo Prodotto: Network Automation root@kitploit: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Fornitore: root@kitploit: InfoBlox...

Vulnerability-Research

🛡️ Ricerca di Vulnerabilità Qui catalogo le vulnerabilità che ho scoperto, i relativi write-up con i dettagli delle debolezze e gli approfondimenti sul loro impatto e sulla loro mitigazione. 🏆 CVE Assegnate...

CVE-2026-14802

CVE-2026-14802 Nome do software vulnerável e versões afetadas versões do create-react-app anteriores à 5.0.2 Descrição No macOS, a função startBrowserProcess no arquivo openBrowser.js do componente react-dev-utils permite injeção de comandos do sistema operacional. Esse problema possibilita...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR-Schwachstellenanalyse Technische Schwachstellenanalyse und CVE-Briefing für CVE-2026-9645 , die die Open-Source-Plattform ScadaBR SCADA/HMI betrifft. Überblick CVE-2026-9645 ist eine kritische Schwachstelle zur authentifizierten Remote-Codeausführung in ScadaBR. Laut dem...