CVE-2026-105767

The integrate-platform-docs composite GitHub Action in Chainguard Academy (edu) is vulnerable to OS Command Injection (CWE-78). The issue arises because the project_id or storage_bucket inputs are interpolated directly into Bash gcloud storage cp commands using ${{ inputs.* }} expressions between...

CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2017-12149

CVE-2017-12149 Un grand merci au maître yunxu1 pour le code source Description : 删掉了图形化页面 修复了识别系统错误导致的命令执行失败 修改成了交互式的shell Utilisation Entrez l'URL et appuyez sur Entrée, cela exécutera automatiquement whoami sur les deux systèmes Regardez le résultat pour déterminer quel système d'exploitation...

CNVD-C-2019-48814

CNVD-C-2019-48814 Vulnérabilité d'exécution de commandes à distance par désérialisation wls9-async dans WebLogic POC avec écho pour weblogic Mise à jour du correctif : https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Reproduction de la vulnérabilité :...

CVE-2017-1000117

CVE-2017-1000117 ملخص المشروع أحد مواضيع تصميم دورة أمن الشبكات إعادة إنتاج ثغرة CVE-2017-1000117 PoC+Exp Git + SSH ملخص الثغرة: اسم الثغرة: ثغرة حقن أوامر Git رقم CNNVD: CNNVD-201708-670 مستوى الخطر: متوسط رقم CVE: CVE-2017-1000117 نوع الثغرة: حقن أوامر تاريخ النشر: 2017-08-16 نوع التهديد: عن بُ...

PHPStudy-Backdoor

PHPStudy-Backdoor – Reproduction de la vulnérabilité de la backdoor backdoor dll phpstudy pour v2016 et v2018 0x01 Recherche de la dll backdoor D:\Pentester\phpStudypython check.py === .\php\php-5.2.17\ext\phpxmlrpc.dll === @eval%s'%s'; %s;@eval%s'%s'; === .\php\php-5.4.45\ext\phpxmlrpc.dll ===...

mssql-command-tool

Outil de connexion terminal mssql | Exécution de commandes Exemple ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...

oracleShell

oracleShell Exécution de commandes sur la base de données Oracle Environnement de test - privilèges DBA : SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Versio...

CVE-2022-36779

authenticated Command Injection for CVE-2022-36779 bon amusement :...

DEBIAN-CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

AZL-106743 CVE-2026-105326 affecting package cups 2.4.19-1

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — حقن أوامر نظام التشغيل في معالجة ملفات P7M نظرة عامة الحقل| التفاصيل ---|--- معرف CVE| CVE-2025-69212 الخطورة| حرجة CVSS 4.0: 9.4 CWE| CWE-78: حقن أوامر نظام التشغيل الإصدارات المتأثرة| OpenSTAManager = 2.9.8 الدالة المعرضة للخطر| XML::decodeP7M في...

MiniPlasma-Runner

MiniPlasma-Runner نسخة معدلة من Nightmare-Eclipse/MiniPlasma CVE-2020-17103 مكيفة للاستخدام كـ C2. أداة الإثبات الأصلية تعمل من القرص فقط. هذه النسخة تعمل بالكامل من الذاكرة عبر execute-assembly، مع نهج ثنائي مجزأ لتجنب الاكتشاف. إخلاء مسؤولية هذه الأداة مُقدمة لأغراض الاختبار الأمني المصرح به...

CVE-2026-69212

CVE-2025-69212 — حقن أوامر نظام التشغيل في OpenSTAManager RCE إثبات المفهوم لاستغلال CVE-2025-69212 ، وهي ثغرة حقن أوامر نظام التشغيل OS Command Injection في OpenSTAManager ;echo ".p7m التنفيذ الناتج في القشرة: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ تم حقنها هنا ملاحظة:...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — Injection de commandes OS dans mediaclip.cgi d'AXIS Étude technique n-day et PoC — analyse technique post-correctif d'une vulnérabilité d'injection de commandes OS de score CVSS 7.1 dans l'API VAPIX Media Clip d'AXIS, redécouverte indépendamment et vérifiée par des tests en boîte...

CVE-2026-90252

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. When a Host Controller Interface HCI command is cancelled, the associated memory is not properly freed, leading to a memory leak. This issue can also prevent the management socket from being released, potentially...

EUVD-2026-92637

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...