186859 matches found
CVE-2021-27877-PoC
CVE-2021-27877 प्रूफ ऑफ कॉन्सेप्ट इस रिपॉजिटरी में Veritas Backup Exec Agent को प्रभावित करने वाले CVE-2021-27877 के लिए मूल Rapid7 Metasploit मॉड्यूल का एक संशोधित संस्करण शामिल है। मेरे परीक्षण के दौरान, मूल Metasploit मॉड्यूल ने लक्ष्य को सफलतापूर्वक कमजोर के रूप में पहचान लिया, लेकिन पेलोड...
CVE-2025-26264
CVE-2025-26264 CVE-2025-26264 - يحتوي GeoVision GV-ASWeb بإصدار 6.1.2.0 أو أقل على ثغرة تنفيذ التعليمات البرمجية عن بُعد Remote Code Execution - RCE ضمن ميزة إعدادات الإشعارات Notification Settings. يمكن لمهاجم مُصادق يتمتع بصلاحيات "إعدادات النظام" System Settings في ASWeb استغلال هذا الخلل لتنف...
cve-2025-66398
⚠️ cve-2025-66398 - أداة إثبات مفهوم بسيطة لتنفيذ الأكواد عن بُعد RCE ⚙️ حول هذه الأداة يعرض هذا المشروع ثغرة تنفيذ أكواد عن بُعد RCE في خوادم Signal K Server الإصدار 2.18.0 والإصدارات الأقدم. يوضح إثبات المفهوم PoC كيف يمكن للمهاجم تنفيذ أوامر على جهاز معرّض للثغرة. صُممت هذه الأداة لمختبري الأمان...
CVE-2026-105767
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105691
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
CVE-2026-105697
Langflow versions prior to 1.10.3 are vulnerable to OS command injection due to a lack of allowlisting in the MCP stdio transport configuration. An attacker capable of accessing MCP server settings or using the MCP Tools component can execute arbitrary OS commands (e.g., rm -rf, reverse shells) o...
CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...
PoC-CVE-2026-9198
Description Code d'exploit de preuve de concept pour CVE-2026-9198 Entrée Exploit-DB : https://www.exploit-db.com/exploits/52675 Utilisation python3 poc.py -u -c...
PwnedCheck
PwnedCheck PwnedCheck एक कमांड-लाइन टूल है जोHave I Been Pwned API का उपयोग करके यह जाँचने के लिए है कि क्या पासवर्ड ज्ञात डेटा उल्लंघनों में दिखाई दिए हैं, और यह एन्क्रिप्टेड Bitwarden वॉल्ट निर्यात को सपोर्ट करता है। विशेषताएँ कमांड लाइन से एकल पासवर्ड की जाँच करें फ़ाइल से पासवर्ड प्रोसेस करें...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
EUVD-2026-92709
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...
CVE-2026-105691
The open-source design platform Penpot contains an OS Command Injection vulnerability in its SVG exporter affecting versions prior to 2.18.0 . The root cause is the unsafely handling of an attacker-controlled fill-color value from a text object, which is placed into a ppmcolormask command string ...
Exploit for Injection in Dlink Dir-868L_B1_Firmware
CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...
CVE-2026-105767 Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...