gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...

cve-2019-9978

cve-2019-9978 Это скрипт, позволяющий эксплуатировать уязвимость CVE-2019-9978 простым способом, предназначенный для использования в соревнованиях Capture The Flag CTF или в качестве доказательства концепции для тестирования на проникновение. Предварительные требования Python 3 Библиотека Request...

CVE-2019-9193

RU GenPostgresRCEExploit — это PoC-инструмент, предназначенный для эксплуатации аутентифицированной уязвимости удаленного выполнения кода RCE в определенных версиях PostgreSQL 9.3–11.7. Он позволяет аутентифицированным пользователям выполнять системные команды на сервере PostgreSQL, уязвимом к...

CVE-2024-7954

CVE-2024-7954 Эта эксплойт-программа попытается выполнить системные команды на целевых системах SPIP CVE-2024-7954. Обзор Это инструмент для массового сканирования и эксплуатации уязвимости CVE-2024-7954: SPIP 4.2.8 позволяет неаутентифицированным злоумышленникам выполнять удалённый код RCE на...

CVE-2025-3248

中文 ｜ Английский Сканер уязвимостей Langflow Сканер уязвимости CVE-2025-3248 в приложениях Langflow. Возможности Сканирование одной цели или нескольких целей с помощью FOFA Выполнение системных команд на уязвимых целях Получение информации о системе Поддержка пользовательских полезных нагрузок...

Web-Check < 2.0.1 Screenshot API - OS Command Injection

Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...

freeswitch_rce

버전: freeswitch는 종종 높은 권한으로 실행되므로, 권한 상승 효과도 얻을 수 있습니다...

CVE-2019-9193

EN GenPostgresRCEExploit 는 인증된 원격 코드 실행RCE 취약점CVE-2019-9193이 있는 특정 PostgreSQL 버전9.311.7을 익스플로잇하기 위해 설계된 PoC 도구입니다. 이 도구는 인증된 사용자가 취약한 PostgreSQL 데이터베이스 서버에서 시스템 명령을 실행할 수 있게 합니다. 기능 RCE 익스플로잇 : 인증된 PostgreSQL 세션을 통해 시스템 명령을 실행합니다. 버전 확인 : 대상 PostgreSQL 서버의 버전을 검증하여 취약점 존재 여부를 확인합니다. 명령 실행 : 취약점이 ...

CVE-2021-41773

CVE-2021-41773 - Удаленное выполнение кода в Apache 2.4.49 PoC для CVE-2021-41773, так как я нашел только переусложненные эксплойты, а этот ведет прямо к удаленному выполнению кода. Использование Просто укажите IP-адрес уязвимого сервера Apache 2.4.49 с помощью флага -i и желаемую системную коман...

EUVD-2026-68298

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82595

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-58115

CVE-2026-58115 affects Siemens SIMATIC IoT2050 Advanced devices (6ES7647-0BA00-1YA2) running Industrial OS with Node-RED. All versions

EUVD-2026-55621

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Zyxel Networks WAH7601 allows OS Command Injection. This issue affects WAH7601: through 20072026...

CVE-2026-72590

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

CVE-2026-66297 Unescaped deployment environment variables in generated setup commands

Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...

CVE-2026-71284

The CVE-2026-71284 issue affects Fledge’s backup-restore upload handler (upload_backup) in python/fledge/services/core/api/backup_restore.py. The handler takes the first extracted tar member’s filename and builds a shell command via string formatting: cmd = "cp {} {}". Since only a prefix/suffix ...

CVE-2026-71243

The CVE-2026-71243 entry concerns the backmeup npm package. It vulnerably assembles shell command strings by concatenating option values (name, source, destination, filter) into a single command (e.g., mkdir -p ...; ) and executes via a shell (ssh2-exec or local child_process), instead of using a...

CVE-2026-7693

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

EUVD-2026-52416

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by this vulnerability is the function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portallogin of the component Login Endpoint. This manipulation causes os command...

CVE-2026-67608

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in actionaudio.php that allows authenticated attackers to execute arbitrary operating system commands by passing an unsanitized pid parameter into an exec call...