8978 matches found
CVE-2026-90690
0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04) is vulnerable to OS command injection in the API Tools Endpoint component. The flaw resides in the subprocess.Popen call within hexstrike_server.py, where manipulation of arguments such as additional_args, target, username...
CVE-2019-17625
CVE-2019-17625 rambox 0.6.9 中存在一个存储型 XSS 漏洞，原因是用户在添加服务时，name 字段中的参数未经过净化。由于 rambox 运行在 NodeJS 上，这使得操作系统命令可以被注入到 或 标签中。 注意： 此代码仅在 MacOS 上测试过，可能需要针对其他操作系统重新配置。 漏洞利用代码 该漏洞利用代码将创建一个服务（以 discord 为基础），shell 要求系统上装有 mkfifo。当然，你可以根据需要替换成任何想要的 payload。 PoC...
CVE-2026-4480-POC
CVE-2026-4480 - Samba 打印子系统远程代码执行 概述 关于 CVE-2026-4480 的概念验证和研究材料，这是一个影响 Samba 打印子系统的严重远程代码执行 RCE 漏洞。 该漏洞是由于对传递给配置的 print command 的用户可控打印作业描述符处理不当所致，该描述通过 %J 替换参数传递。 漏洞详情 CVE: CVE-2026-4480 组件: Samba 打印子系统 类型: 操作系统命令注入 CWE-78 影响: 远程代码执行 攻击向量: 网络 身份认证: 取决于配置 严重性: 严重 根据 Samba 安全公告，该问题的出现是因为在通过 %J...
CVE-2024-53376
CVE-2024-53376 Inyección de comandos del sistema operativo autenticada en CyberPanel Dispositivos afectados Las versiones de CyberPanel anteriores a 2.3.8 son vulnerables a una inyección de comandos del sistema operativo. Para explotar la vulnerabilidad, el atacante debe iniciar sesión primero en...
Wavlink WN535K2/WN535K3 - OS Command Injection
Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown code in /cgi-bin/nightled.cgi via manipulation of the argument starthour. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised syste...
Advantech R-SeeNet 2.4.12 - OS Command Injection
Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...
Palo Alto Networks Expedition - OS Command Injection
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...
CVE-2026-90621
A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2019-19919
CVE-2019-19919 Handlebars 在输出中使用的特殊元素的中和不当（注入）漏洞 pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py 输入目标URL: 利用预期输出 : 输入目标URL（例如 http://example.com/render）: http://example.com/render 输入要执行的OS命令: ls + 正在向 http://example.com/render 发送利用载荷... ...
CVE-2023-33381-MitraStar-GPT-2741GNAC
CVE-2023-33381-MitraStar-GPT-2741GNAC CVE-2023-33381：MitraStar GPT-2741GNAC 上的操作系统命令注入 设备：GPT-2741GNAC 固件版本：ARg5.8110WVN0b72 漏洞描述： 通过 SSH 登录后，我立即注意到可用命令和选项的有限集合。很明显，我确实被限制在一个受限的 shell 环境中。 在探索了几种已知漏洞后，我决定深入挖掘新的漏洞。首先，我登录了管理门户，并开始测试各种可能导致操作系统命令注入的功能。在诊断菜单中，我遇到了一个特殊功能，它允许我使用 ping 和 traceroute 命令测试连通...
CVE-2026-90618
A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...
CVE-2026-90617
A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...
CVE-2026-90619
A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...
CVE-2026-90621
CVE-2026-90621 is an OS command injection vulnerability in ipa-lab HackingBuddyGPT (versions up to 0.5.0 ), affecting the ssh_run_command function within src/hackingBuddyGPT/extensions/ssh_run_command.py. The attack can be launched remotely and requires low privileges , with no user interaction n...
EUVD-2026-77188
A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2022-30525
CVE-2022-30525 Zyxel CGI程序中的操作系统命令注入漏洞 执行摘要 该漏洞最初于2022年4月13日被发现，导致Zyxel防火墙产品中的远程代码执行。这个CVSS评分为9.8的重要漏洞在出现15天后，Zyxel发布的更新中得到了修复。此过程中至少有20,800台型号受到影响，主要在欧洲。 该漏洞源于零接触配置小程序中的"setWanPortSt"命令。对"setWanPortSt"命令的访问通过/ztp/cgi-bin/handler端点进行。...
CVE-2026-90619
0x4m4 HexStrike AI (up to commit d689933ff579d839c676c82b231f8e98326c5f04 ) is affected by an OS command injection in the Execute Endpoint of the file hexstrike_server.py . An unauthenticated remote attacker can manipulate the code/script argument to inject arbitrary OS commands. The proof-of-con...
EUVD-2026-77178
A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...
CVE-2026-90619 0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection
A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...