76842 matches found
CVE-2023-27216
CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...
CVE-2026-76437 Cisco Smart Software Manager On-Prem Command Injection Vulnerability
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...
CVE-2026-76437
A vulnerability in the web-based user interface of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) allows an authenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges . The root cause is the improper validation of us...
EUVD-2026-94452
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...
CVE-2026-76437 Cisco Smart Software Manager On-Prem Command Injection Vulnerability
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...
CVE-2026-20321 Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
EUVD-2026-94524
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
CVE-2026-20321
A vulnerability exists in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) . Due to insufficient input validation of user-controlled command arguments, an authenticated remote attacker with valid administrative credentials can send crafted input to the AP...
CVE-2021-38647
OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...
Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as Next Generation OAM NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an...
Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
CVE-2024-23108
CVE-2024-23108 POC Proof of concept exploit to blindly execute commands as root on vulnerable FortiSIEM appliances. I just quickly added the option to supply a list and added some coloring. The orginal and all the cred goes to horizon3 see blog post below Blog Post Root cause and indicators of...
Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805
Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...
owt
Actualmente inestable, se actualizará eventualmente. Offensive Wifi Toolkit owt creado por Brennan Mccown clu3bot Esta herramienta compila algunas herramientas necesarias para la auditoría wifi en un script bash de Unix con una interfaz amigable. El objetivo de owt es tener el menor tamaño de...
ROOT-APP-NPM-CVE-2026-18446 CVE-2026-18446 in fast-uri - Patched by Root
Root has patched CVE-2026-18446 in the fast-uri package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-75975 CVE-2026-75975 in fast-uri - Patched by Root
Root has patched CVE-2026-75975 in the fast-uri package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-6322 CVE-2026-6322 in fast-uri - Patched by Root
Root has patched CVE-2026-6322 in the fast-uri package for Root:npm. Multiple fixed versions available...