CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ QNAP QTS...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare ❯ python3 cve-2025-1974-exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================...

CVE-2026-126723

Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI whitelist RPC handler /usr/lib/lua/luci/data/whitelistplt.lua, where unsanitized user-supplied MAC addresses are concatenated into os.execute without validation, yielding root command execution via a...

CVE-2026-126723 CVE-2026-126723

Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI whitelist RPC handler /usr/lib/lua/luci/data/whitelistplt.lua, where unsanitized user-supplied MAC addresses are concatenated into os.execute without validation, yielding root command execution via a...

EUVD-2026-123583

Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI whitelist RPC handler /usr/lib/lua/luci/data/whitelistplt.lua, where unsanitized user-supplied MAC addresses are concatenated into os.execute without validation, yielding root command execution via a...

CVE-2026-126723

The Rooxis RXR-12 Wi-Fi router is vulnerable to an authenticated command injection flaw in the LuCI white_list RPC handler located at /usr/lib/lua/luci/data/white_list_plt.lua. The root cause is the lack of validation for user-supplied MAC addresses , which are concatenated into os.execute() with...

CVE-2024-57376

CVE-2024-57376 Pre-auth remote code execution exploit for D-Link DSR-250 and DSR-250N Security advisory: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Usage $ python3 exploit.py usage: Example $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

CVE-2026-126723: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI white_list RPC handler…

Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI whitelist RPC handler /usr/lib/lua/luci/data/whitelistplt.lua, where unsanitized user-supplied MAC addresses are concatenated into os.execute without validation, yielding root command execution via a...

PT-2026-145283

Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI white list RPC handler /usr/lib/lua/luci/data/white list plt.lua, where unsanitized user-supplied MAC addresses are concatenated into os.execute without validation, yielding root command execution via...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root DEMONSTRATION OF VULNERABILITY Add a new user: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo Add a new entry test ALL=ALL, !root /usr/bin/id // specifying...

CVE-2023-51073

CVE-2023-51073 - Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03 Christopher J. Pace and Ryan Miller The Buffalo LS210D is a Network Attached Storage NAS server designed and marketed towards small-businesses and individuals. Within the LS210D is the ability t...

CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlink HG323RW An authenticated limited web user can upload a shell script through the Netlink HG323RW diagnostic import handler and have the UID-0 BOA process execute it. Authentication and valid verification/CSRF values are required; this...

CVE-2026-34990

CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB Unauthenticated remote root command execution CWE-78 — OS Command Injection in the formSystemCheck handler, reachable via a hardcoded authentication backdoor. Verified against DAP-1360 RevB, firmware 2.14B05. Root Cause Two independent issues chained: 1...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

CVE-2019-19268

CVE-2019-19268 Affected Version: rConfig 3.9.2. Description Multiple attack vectors in rConfig v3.9.2 due to misconfiguration, which allows local users to execute root commands via sudo. Discoverers dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email: [email protected]...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

LXD has arbitrary file write on client due to trusted image hash

Reported from https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x Summary An arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Details -...

CVE-2026-57154

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11 and 26.4.1p1, authenticated Web UI or API users with delegated access to affected settings can submit CR or LF characters in fields expected to contain one line, causing generated privileged service configuration files to...