CVE-2020-13159

CVE-2020-13159 - Artica Proxy precedente alla 4.30.000000 Community Edition consente molteplici iniezioni di comandi del sistema operativo. Descrizione del prodotto: Artica Tech offre una soluzione potente ma semplice da usare, di solito prerogativa delle grandi aziende e delle multinazionali. Co...

CVE-2025-34030-PoC

CVE-2025-34030 - sar2html: parametro 'plot' RCE CVSS: 10.0 Critico Vulnerabilità: Iniezione di comandi del sistema operativo Linguaggio di programmazione: PHP Codice exploit: Python References: https://nvd.nist.gov/vuln/detail/CVE-2025-34030...

CVE-2024-3400

CVE-2024-3400: OS-Befehlsinjektions-Schwachstelle im GlobalProtect Gateway Schweregrad: KRITISCH 10/10 ⚠️...

CVE-2023-6019

حقن أوامر Ray OS RCE غير مصرح به الاستخدام: 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...

CVE-2022-36779

CVE-2022-36779 codice exploit per iniezione di comandi del sistema operativo non autenticata su router cellulare industriale Proscend. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.htm...

CVE-2024-56115

CVE-2024-56115 Descrizione suggerita Esiste una vulnerabilità in Amiro.CMS prima della versione 7.8.4 a causa della mancata adozione di misure per neutralizzare elementi speciali. Consente a un attaccante remoto di condurre un attacco Cross-Site Scripting XSS. Tipo di vulnerabilità CWE-78 |...

CVE-2026-82082

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versioni Utilizzo root@kitploit: CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-Requests-1896609

Richieste CVE 1896609 - feiskyer/mcp-kubernetes-server Riepilogo esecutivo Questo rapporto descrive due vulnerabilità di sicurezza critiche scoperte nel pacchetto feiskyer/mcp-kubernetes-server. Quando viene distribuito, il server espone uno strumento MCP chiamato kubectl, pensato per fornire un...

EUVD-2026-67401

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82082 Green-Computing｜NUMail - OS Command Injection

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82082

NUMail by Green-Computing is affected by an OS Command Injection vulnerability that allows unauthenticated remote attackers to inject and execute arbitrary OS commands on the server. The vulnerability is rated CVSS 3.1: 9.8 (CRITICAL) with a network attack vector, low complexity, and no privilege...

CVE-2025-32375

Configurazione per la versione vulnerabile. Avvia il container vulnerabile: root@kitploit: docker compose up Crea un listener es. ncat: root@kitploit: ncat -klnv 1337 Esegui l'exploit: root@kitploit: python3 exploit.py Dovresti ricevere una richiesta HTTP nella finestra di ncat con il contenuto d...

EUVD-2026-67292

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

CVE-2026-78037

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

CVE-2026-76060

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0 , the client_params.sh script—invoked by the openNDS daemon to serve the authenticated client status page—is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embed...

PT-2026-82868

Name of the Vulnerable Software and Affected Versions NUMail versions prior to 202602162 Description NUMail contains an OS Command Injection flaw that allows unauthenticated remote attackers to inject and execute arbitrary operating-system commands on the server. This occurs because the applicati...