186828 matches found
CVE-2021-27877-PoC
CVE-2021-27877 Preuve de concept Ce dépôt contient une version modifiée du module Metasploit original de Rapid7 pour CVE-2021-27877 affectant l'agent Veritas Backup Exec. Lors de mes tests, le module Metasploit original a bien identifié la cible comme vulnérable mais a systématiquement échoué à...
CVE-2025-26264
CVE-2025-26264 CVE-2025-26264 — GeoVision GV-ASWeb версии 6.1.2.0 или ниже содержит уязвимость удалённого выполнения кода RCE в функции «Настройки уведомлений» Notification Settings. Аутентифицированный злоумышленник с привилегиями «Системные настройки» в ASWeb может использовать эту уязвимость д...
cve-2025-66398
⚠️ cve-2025-66398 - Outil simple de preuve de concept RCE ⚙️ À propos de cet outil Ce projet démontre une vulnérabilité d'exécution de code à distance RCE dans Signal K Server versions 2.18.0 et antérieures. La preuve de concept PoC montre comment un attaquant pourrait exécuter des commandes sur un...
CVE-2026-105767
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105691
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105697
Langflow versions prior to 1.10.3 are vulnerable to OS command injection due to a lack of allowlisting in the MCP stdio transport configuration. An attacker capable of accessing MCP server settings or using the MCP Tools component can execute arbitrary OS commands (e.g., rm -rf, reverse shells) o...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
PoC-CVE-2026-9198
Описание Код эксплойта proof of concept для CVE-2026-9198 Запись в Exploit-DB: https://www.exploit-db.com/exploits/52675 Использование python3 poc.py -u -c...
PwnedCheck
PwnedCheck PwnedCheck est un outil en ligne de commande permettant de vérifier si des mots de passe sont apparus dans des violations de données connues, en utilisant l'APIHave I Been Pwned et prenant en charge les exports de coffres Bitwarden chiffrés. Fonctionnalités Vérifier un seul mot de pass...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
EUVD-2026-92709
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691
The open-source design platform Penpot contains an OS Command Injection vulnerability in its SVG exporter affecting versions prior to 2.18.0 . The root cause is the unsafely handling of an attacker-controlled fill-color value from a text object, which is placed into a ppmcolormask command string ...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
Exploit for Injection in Dlink Dir-868L_B1_Firmware
CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...
EUVD-2026-92780
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...