WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read

WGDashboard = 4.2.3 contains a command injection caused by multiple OS command injection points, letting authenticated attackers execute arbitrary commands as root. id: CVE-2026-15733 info: name: WGDashboard = 4.3.2 - Authenticated OS Command Injection /etc/passwd Read author: str4k3r,0xAkoko...

CVE-2026-76461

⚡ CVE-2026-76461 - Critical SQL Injection A critical, remotely exploitable SQL injection vulnerability in Cisco Secure Email Gateway's email parsing...

aapanel-ws-bypass

aaPanel: Vendors Don't Always Fix Things Properly An incomplete fix for CVE-2021-37840 still exposes 3.6M servers to root RCE, 5 years later Discovered by: EON Security CVE: Pending assignment CVSS: 8.8 High — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: aaPanel versions 6.8.12 through 7.65.0...

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase Critical Sandbox Escape Unauthenticated / Low-Privilege → Root Remote Code Execution in NocoBase 📌 Overview CVE-2026-34156 is a critical sandbox escape vulnerability in NocoBase an open-source no-code/low-code platform. An attacker with the ability to create or execute...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE The RCE is obtained by abusing 2 vulnerabilities CVE-2026-55494 CVE-2026-62308 In short, a SSRF vulnerability is abused to call to an unauthenticated service in the internal network to create a docker that shares the same pid with tugtainer, thus making the file system of th...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter After successful exploitation: nc 1001 bash -i Tested On Sendmail 8.13.4/8.13.4/Debian-3sarge3 ClamAV-Milter 0.91.2 References Original exploit: https://www.exploit-...

CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQL Injection → Root RCE Proof-of-concept for CVE-2026-67401 , a critical SQL injection vulnerability in cPanel & WHM's EmailTrack functionality that allows an authenticated user with mail-related privileges to write arbitrary files and execute code as root...

CVE-2026-20079

🚨 CVE-2026-20079 "Critical Cisco FMC Zero-Day" Critical Authentication Bypass Leading to Root RCE in Cisco Secure Firewall Management Center 📋 Overview CVE-2026-20079 is a critical vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software. An unauthenticated remot...

CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read read-only PoC Read-only proof of concept. It demonstrates the authentication bypass by reading a root-only file from a vulnerable host. It writes nothing to the target: no LaunchDaemon, no shell startup file, no crontab, no RCE chain...

CVE-2025-31644

CVE-2025-31644: Command Injection in Appliance mode in F5 BIG-IP The “file” parameter of the “save” command is vulnerable to a command injection attack, allowing an authenticated attacker with administrator privileges to the “/mgmt” web API or the SSH “tmsh” shell, to obtain remote code execution...

cpanel-pwn

cpanel-pwn cPanel/WHM security testing toolkit. Implements the CVE-2026-41940 CRLF injection authentication bypass and post-exploitation privilege pivoting. Tools Script| Purpose ---|--- cpanelexploit.py| CVE-2026-41940: CRLF injection → WHM auth bypass → root access CVE-2026-41940 Type: CRLF...

Cisco-ASA-vulnerability-research

LINAFULLRE — Full-Coverage Reverse Engineering of lina Created: 2026-08-12 Target: labasav9-12-4-67/lina ASAv 9.12467, ELF x86-64, PIE; Ghidra image base 0x100000; 112,687 functions , 167 MB mapped, 642,707 symbols Track goal: systematic, complete RE coverage of the lina binary — complementing th...

CVE-2026-88533

CVE-2026-88533: Unauthenticated Arbitrary File Write → Root RCE in QAnything CVE ID : CVE-2026-88533 assigned by MITRE, record publication pending Product : QAnything by netease-youdao — open-source RAG / knowledge-base QA platform Affected : v1.4.x through v2.0.0 default branch qanything-v2,...

CVE-2026-67401-cPanel-EmailTrack-SQLi

CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Mitigation Tool & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, Track Delivery SQL injection...

CVE-2026-93958

D-Link R95 BE9500 Wi-Fi 7 Smart Router Vendor：D-Link Product：R95 Product Model：BE9500 Firmware Version：1.01B06 Vulnerability Type：Authenticated Command Injection Description The D-Link R95 BE9500 Wi-Fi 7 Smart Router firmware version BE95001.00.16 contains a command injection vulnerability in the...

Exploit for OS Command Injection in Pfsense Pfblockerng

CVE-2022-40624 — pfBlockerNG — Host header → root RCE Лаборат...

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE

atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE """atvise SCADA OPC UA Authentication Bypass Unauthenticated Root RCE""" from future import annotations from kittysploit import from lib.protocols.http.httpclient import Httpclient import sys, os, json, random, hashlib,...

GigaSpaces XAP Unauthenticated Path Traversal to Root RCE — Detect

Fingerprint / reachability check for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for GigaSpaces XAP Unauthenticated Path Traversal to Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Lantronix EDS3000PR — Authenticated Command Injection in SSL `-passin pass:%s` → — Detect

Fingerprint / reachability check for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Lantronix EDS3000PR — Authenticated Command Injection in SSL -passin pass:%s → Root RCE""" from kittysploit impor...