CVE-2026-81698

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-81696

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

CVE-2026-81684

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

CVE-2026-81101

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted...

CVE-2026-81097

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

CVE-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding...

CVE-2026-75573

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

CVE-2026-57499

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

[R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1 Arnie Cabral Thu, 08/27/2026 - 13:05 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID |...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 descrive una vulnerabilità di OS Command Injection Iniezione di comandi di sistema presente nel software My Computer del sistema operativo Pardus. Questa vulnerabilità consente a un utente di iniettare comandi di sistema tramite il parametro nome file, permettendo co...

CVE-2025-54100

CVE-2025-54100 Il curl di PowerShell utilizza Invoke-WebRequest internamente. root@kitploit: PS C:\Users\melih curl cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:...

CVE-2022-22954

CVE-2022-22954 PoC RCE tramite SSTI in VMware Workspace ONE Access e Identity Manager. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fil...

Embedded-Backdoor-Connection

Eingebettete Hintertür-Verbindung über PDF-Dateien 😈 präsentiert von Einleitung Dieses Demonstrationsvideo zeigt, wie wir das Gerät des Opfers kontrollieren können, indem wir die harmlos aussehende PDF-Datei an das Ziel senden, die tatsächlich eine eingebettete Nutzlast enthält. Der Exploit wurde...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 Exemplo de código PHP de PoC para CVE-2017-5638 Uso php exploit.php "http://127.0.0.1:8080/example/index.action" "command" USE POR SUA CONTA E RISCO...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Strumenti di rilevamento sicuri per due famiglie correlate di vulnerabilità di escalation dei privilegi locali del kernel Linux — Copy Fail CVE-2026-31431 e Dirty Frag CVE-2026-43284 / CVE-2026-43500 — entrambe che interessano tutte le...

CVE-2024-2997

CVE-2024-2997 Scanner Panoramica CVE-2024-2997 Scanner è uno scanner di vulnerabilità avanzato progettato per rilevare la vulnerabilità di command injection nelle applicazioni web. Questo strumento aiuta i professionisti della sicurezza a identificare potenziali rischi di sicurezza nelle loro...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST-Sicherheitslücke CVE-2022-1388 Verwendung Dieser POC ist verifiziert! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length:...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' Escalatazione dei Privilegi Locali Dona Aiuta a mantenere questo progetto Se trovi utile questo progetto, considera di supportare la sua manutenzione continua tramite PayPal o ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 PASSO 1: Demo di web-app vulnerabile LAB Creiamo una logica simile a CVE-2025-55182 esecuzione non sicura lato server. 📁 vulnapp/app.py root@kitploit: from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data =...

OPENSUSE-SU-2026:21667-1 Security update for file-roller

This update for file-roller fixes the following issues: Changes in file-roller: - CVE-2026-78322: Check line length when parsing command output bsc1276442...