-CVE-2014-6271

root@kitploit: / || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 — شيلشوك تنفيذ الأوامر عن بُعد عبر حقن متغيرات بيئة باش "ثغرة ظلت مخفية في باش لعقود وهزت أسس الإنترنت في أقل من 24 ساعة." الفهرس...

CVE-2014-6271

CVE-2014-6271 Shellshock - Exploit Python Une implémentation Python propre, efficace et interactive conçue pour tester la vulnérabilité Shellshock CVE-2014-6271 via l'injection de variables d'environnement HTTP. 📝 Description Shellshock CVE-2014-6271 est une vulnérabilité de sécurité critique dan...

CVE-2021-4034-pwnkit

CVE-2021-4034, PwnKit Preuve de concept pour PwnKit, une escalade de privilèges locale dans pkexec de polkit. Sur une installation par défaut, tout utilisateur local non privilégié peut devenir root. À propos du bogue Les versions vulnérables de pkexec gèrent mal le comptage des arguments du...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

خادم الويب Goahead قبل الإصدار 5.1.5 إثبات مفهوم لـ RCE CVE-2021-42342 تم اكتشاف ثغرة حديثة في خادم الويب Goahead بواسطة William Bowling تؤدي إلى تنفيذ أوامر عن بُعد RCE على الخادم المُختَرق. الخلل موجود في الإصدارات السابقة للإصدار 5.1.5، والتي وفقًا لـ Shodan تغطي حوالي 2.8 مليون خادم على...

telnet_scan

Scanner de vulnérabilités Telnet CVE-2026-24061 & CVE-2026-32746 Un outil d'évaluation de sécurité basé sur Python qui détecte et le cas échéant exploite deux vulnérabilités critiques dans GNU InetUtils telnetd : CVE-2026-24061 – Contournement d'authentification par injection de variable...

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Внедрение переменных окружения в бессерверную функцию через событие Программный код имитация Python Lambda root@kitploit: lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment variable override...

CVE-2014-6271-Shellshock-

Эксплуатация Shellshock CVE-2014-6271: Полная, современная лаборатория для демонстрации Shellshock CVE-2014-6271 — одна из самых влиятельных уязвимостей удаленного выполнения кода, когда-либо обнаруженных. Дефект затрагивает Bash и позволяет злоумышленникам выполнять произвольные команды, просто...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE non authentifiée injection de variables d'environnement MCP stdio Exécution de code à distance non authentifiée dans Langflow OSS jusqu'à la version 1.10.1. La liste noire de variables d'environnement qui protège la configuration des serveurs MCP stdio...

Shocker-TJNULL-OSCP-

HackTheBox : Writeup de Shocker Un walkthrough structuré et professionnel illustrant l'identification et l'exploitation manuelle de la faille critique Shellshock , suivie d'une élévation de privilèges locale via des droits sudo mal configurés sur une cible Linux. Aperçu technique Système...

CVE-2026-53541

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-18937 Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection

The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...

CVE-2026-18937

The Broken Link Checker plugin before 2.4.12 accepts unrestricted query variables on sites using plain permalinks, letting unauthenticated users overwrite arbitrary PHP globals and achieve remote code execution when a classic editor is active. CVSS 9.0 (Critical). No exploitation evidence is prov...

CVE-2026-12940

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

EUVD-2026-51240

IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...

CVE-2026-54364

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

CVE-2026-62203

OpenClaw vulnerable before version 2026.6.6 due to an environment variable filtering issue in host exec that fails to sanitize rustup startup variables. Affected product: OpenClaw. Root cause: improper sanitization of environment variables during rustup startup. Impact: attackers with lower-trust...

CVE-2026-62203 OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203 OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203 OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...