Lucene search
+L

67449 matches found

Cvelist
Cvelist
added 2026/09/11 2:57 p.m.35 views

CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

9.8CVSS0.02853EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 2:57 p.m.9 views

EUVD-2026-76130

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

9.8CVSS0.02853EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 2:42 p.m.36 views

CVE-2026-8301 OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 2:42 p.m.11 views

EUVD-2026-76125

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 2:42 p.m.14 views

CVE-2026-8301

CVE-2026-8301 is an OS Command Injection vulnerability in TUBITAK BILGEM's Pardus Boot Repair , caused by improper neutralization of special elements in an OS command. The issue affects versions before 1.0.8 . The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low privil...

7.8CVSS0.00481EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 12:49 p.m.6 views

CVE-2026-63077

Overview • Visual Flow • Requirements • Usage • Limitations • Mitigation !CAUTION This PoC executes an operating-system command and can modify the TeamCity application directory. Use it only in an isolated lab or against systems for which you have explicit written authorization. ⚡ Overview...

9.8CVSS8.3AI score0.86518EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/11 9:20 a.m.5 views

CVE-2026-0257-PoC

CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass Remote Detection PoC Detection only. No exploitation. No credentials submitted. No cookies forged. Overview CVE-2026-0257 is an authentication bypass vulnerability CWE-565 — Reliance on Cookies without Validation and Integrity Checking in...

9.1CVSS6.7AI score0.95156EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/11 8:30 a.m.38 views

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 7:21 a.m.5 views

CVE-2026-22226

CVE-2026-22226 Proof of Concept for CVE-2026-22226 Authenticated LAN-side OS Command Injection in the VPN Client of TP-Link Archer Wi-Fi routers Vulnerability brief The VPN Client controller stores the user-controlled entry description des in the UCI configuration with a weak validation regex. Wh...

8.5CVSS7.6AI score0.02511EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:15 a.m.6 views

ROOT-OS-DEBIAN-12-CVE-2026-80186 CVE-2026-80186 in bluez - Patched by Root

Root has patched CVE-2026-80186 in the bluez package for Root:Debian:12. Multiple fixed versions available...

7.6CVSS0.00406EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:10 a.m.7 views

ROOT-OS-DEBIAN-11-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root

Root has patched CVE-2023-51594 in the bluez package for Root:Debian:11. Multiple fixed versions available...

5.7CVSS5.8AI score0.00949EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 6:52 a.m.25 views

ROOT-OS-DEBIAN-11-CVE-2026-54241 CVE-2026-54241 in libde265 - Patched by Root

Root has patched CVE-2026-54241 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

7.4CVSS5.3AI score0.00238EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 6:52 a.m.8 views

ROOT-OS-DEBIAN-11-CVE-2026-45382 CVE-2026-45382 in libde265 - Patched by Root

Root has patched CVE-2026-45382 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

6.9CVSS5.3AI score0.00428EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:50 a.m.9 views

panos-captive-portal-rce

CVE-2026-0300 — Escáner de RCE por Desbordamiento de Búfer en el Portal C cautivo de User-ID de PAN-OS...

9.8CVSS7.7AI score0.31725EPSS
SaveExploits7References6
OSV
OSV
added 2026/09/11 6:31 a.m.6 views

ROOT-OS-DEBIAN-12-CVE-2025-69534 CVE-2025-69534 in python3.11 - Patched by Root

Root has patched CVE-2025-69534 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

7.5CVSS7.3AI score0.00566EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.128 views

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

9.8CVSS8.1AI score0.91881EPSS
SaveExploits14References5
Kitploit
Kitploit
added 2026/09/11 5:18 a.m.5 views

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure Detector A non-intrusive detection script for SonicWall Secure Mobile Access SMA 1000 series appliances affected by CVE-2026-83548 pre-auth SSRF in the Work Place interface, CVSS 10.0 and CVE-2026-83549 post-auth OS command injection i...

10CVSS8.5AI score0.08505EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/11 5:18 a.m.7 views

vxworks_hash

vxworkshash code to reverse vxworks 5.x password hashes This is really old now! : See my blog post for more info: http://cvk.posthaven.com/how-to-crack-vxworks-password-hashes...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 5:06 a.m.7 views

cve-2024-0012-poc

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to access the management web interface over the network, obtain PAN-OS administrator privileges, and thereby perform administrativ...

9.8CVSS8.2AI score0.99718EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/11 4:57 a.m.40 views

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

6.2AI score
SaveExploits0References12
Rows per page
Query Builder