Lucene search
+L

67488 matches found

Kitploit
Kitploit
added 2026/09/11 5:29 p.m.7 views

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:36 p.m.7 views

CVE-2026-14802

CVE-2026-14802 Nombre del software vulnerable y versiones afectadas create-react-app versiones anteriores a la 5.0.2 Descripción En macOS, la función startBrowserProcess dentro del archivo openBrowser.js del componente react-dev-utils permite la inyección de comandos del sistema operativo. Este...

7.5CVSS7.4AI score0.02109EPSS
SaveExploits1
NVD
NVD
added 2026/09/11 4:17 p.m.8 views

CVE-2026-89066

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS0.00157EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/11 4:17 p.m.9 views

CVE-2026-7863

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5...

8.4CVSS0.00534EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:12 p.m.7 views

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — Análisis de Vulnerabilidad de ScadaBR Análisis técnico de vulnerabilidad e informe CVE para CVE-2026-9645 , que afecta a la plataforma de código abierto ScadaBR SCADA/HMI. Resumen CVE-2026-9645 es una vulnerabilidad crítica de ejecución remota de código autenticada en ScadaBR. Seg...

9.9CVSS5.9AI score0.00411EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/11 4:05 p.m.43 views

CVE-2026-89066 OS command injection in the task synthesis component in projen

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS0.00157EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 4:05 p.m.8 views

CVE-2026-89066 OS command injection in the task synthesis component in projen

Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...

8.4CVSS6.6AI score
SaveExploits0References5
CVE
CVE
added 2026/09/11 4:05 p.m.31 views

CVE-2026-89066

CVE-2026-89066 is an OS command injection vulnerability in the task synthesis component of projen (versions before 0.103.0 ). Shell metacharacters present in project configuration values and repository file names are interpolated unsanitized into generated task definitions, allowing arbitrary com...

8.4CVSS0.00157EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 4:04 p.m.9 views

EUVD-2026-76149

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5...

8.4CVSS0.00534EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/11 4:04 p.m.43 views

CVE-2026-7863 OS Command Injection in TUBITAK BILGEM's Pardus Software

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5...

8.4CVSS0.00534EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 4:04 p.m.14 views

CVE-2026-7863

CVE-2026-7863 is an OS command injection vulnerability in TUBITAK BILGEM's Pardus Software (versions before 1.0.5 ), caused by improper neutralization of special elements used in an OS command. The vulnerability is reachable via a local attack vector with low complexity , requires no privileges a...

8.4CVSS0.00534EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 3:17 p.m.8 views

CVE-2026-8301

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 3:17 p.m.9 views

CVE-2026-89010

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

9.8CVSS0.02853EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 2:57 p.m.35 views

CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

9.8CVSS0.02853EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 2:57 p.m.9 views

EUVD-2026-76130

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

9.8CVSS0.02853EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 2:42 p.m.36 views

CVE-2026-8301 OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 2:42 p.m.11 views

EUVD-2026-76125

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 2:42 p.m.14 views

CVE-2026-8301

CVE-2026-8301 is an OS Command Injection vulnerability in TUBITAK BILGEM's Pardus Boot Repair , caused by improper neutralization of special elements in an OS command. The issue affects versions before 1.0.8 . The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low privil...

7.8CVSS0.00481EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 12:49 p.m.6 views

CVE-2026-63077

Resumen • Flujo visual • Requisitos • Uso • Limitaciones • Mitigación !CAUTION Este PoC ejecuta un comando del sistema operativo y puede modificar el directorio de la aplicación TeamCity. Úselo únicamente en un laboratorio aislado o contra sistemas para los que tenga autorización explícita por...

9.8CVSS8.3AI score0.86518EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/11 9:20 a.m.5 views

CVE-2026-0257-PoC

CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass Remote Detection PoC Detection only. No exploitation. No credentials submitted. No cookies forged. Overview CVE-2026-0257 is an authentication bypass vulnerability CWE-565 — Reliance on Cookies without Validation and Integrity Checking in...

9.1CVSS6.7AI score0.95156EPSS
SaveExploits11
Rows per page
Query Builder