CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

CVE-2026-82369: Improper Neutralization of Special Elements used in an OS Command

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell...

CVE-2021-42561

CVE-2021-42561: Command Injection via the Human Plugin in MITRE Caldera In Caldera versions =2.8.1 the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allow attackers to use shell metacharacters e.g. backticks "" or dollar parenthesis "$" in order to esca...

CVE-2007-2447

CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...

POC-CVE-2026-19679

CVE-2026-19679 — sanitización insuficiente de los nombres de archivo subidos validación de entrada Estado: CONFIRMADO en un laboratorio 6.7.2-14.el9 2026-08-20. POST /rest/auditFile con tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" devolvió HTTP 200 y registró AuditFile 1000002: el...

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configuration of % in sshconfig...

CVE-2026-28672

CVE-2026-28672 — Inyección de comandos del sistema operativo en UnixUserGroupBuilder de Apache Ranger Reproductor de prueba de concepto ejecutable para la inyección de comandos del sistema operativo en el módulo de sincronización de usuarios unixusersync de Apache Ranger. Mientras enumera los...

POC-CVE-2026-19681

CVE-2026-19681 — inyección de comandos en el procesamiento de subida de archivos autenticado Estado: CONFIRMADO en un laboratorio 6.7.2-14.el9 2026-08-20. Nombre de archivo preparado p;sleep$IFS20;-EvvfJk mediante POST /rest/file/upload el prefijo del contexto contiene los metacaracteres; luego...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script Este repositorio contiene un script de Python diseñado para automatizar la explotación de la vulnerabilidad CVE-2007-2447 en servidores Samba versiones 3.0.20 a 3.0.25rc3. Esta herramienta ha sido desarrollada con fines exclusivamente educativos y...

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: OS command injection via ffmpeg tool options runFFmpegCommand passes a string built from MCP tool parameters to spawn…, shell: true , so shell metacharacters in options, format, codec, pixelFormat or extraOptions execute on the host running the server...

CVE-2019-19781

CVE-2019-19781 Solo un exploit en python3 para CVE-2019-19781 para Citrix detrás de una caché. Esta versión acepta '', '|', '2&1'... etc. USO python3 CVE-2019-19781.py citrix.example.org 'cat /etc/passwd' Por hacer Repetir si el encabezado Age está en la respuesta. Modo continuo -c. Modo de...

CVE-2020-35713

Description Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. How to use Step 1: Modify the IP address in cve-2020-35713.py file to the target address Step 2: Run the...

CVE-2026-94106 getID3 before 1.9.26 OS Command Injection via Unescaped Filenames

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding...

CVE-2026-94106: Improper Neutralization of Special Elements used in an OS Command

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2007-2447

CVE-2007-2447 Vulnerabilidad de inyección remota de comandos CVE-2007-2447, permite a atacantes remotos ejecutar comandos arbitrarios especificando un nombre de usuario de Samba que contenga metacaracteres de shell...

CVE-2007-2447

CVE-2007-2447 - username map script "The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows...

CVE-2025-64155-hunter

CVE-2025-64155 Scanner A Python scanner for detecting the command injection vulnerability CVE-2025-64155 in Phoenix Monitor service. Description CVE-2025-64155 is a command injection vulnerability in Phoenix Monitor service that allows remote code execution through the clusterurl parameter in the...

CVE-2026-63766_exploit

CVE-2026-63766 — Inyección de comandos del sistema operativo sin autenticación en GPT-SoVITS Ejecución remota de código sin autenticación en la interfaz web de Gradio de GPT-SoVITS webui.py. Las utilidades de procesamiento de audio openasr, openslice, opendenoise, openuvr5 interpolan los valores ...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Inyección de comandos a través de la URL de Git en el pipeline de CI/CD Código del programa Python root@kitploit: cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd =...