EUVD-2026-92780

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105767

The integrate-platform-docs composite GitHub Action in Chainguard Academy (edu) is vulnerable to OS Command Injection (CWE-78). The issue arises because the project_id or storage_bucket inputs are interpolated directly into Bash gcloud storage cp commands using ${{ inputs.* }} expressions between...

CVE-2017-12149

CVE-2017-12149 yunxu1 गुरु के स्रोत कोड के लिए बहुत धन्यवाद विवरण: 删掉了图形化页面 修复了识别系统错误导致的命令执行失败 修改成了交互式的shell उपयोग URL दर्ज करें और एंटर दबाएं, यह स्वचालित रूप से दो सिस्टमों पर whoami निष्पादित करेगा परिणाम देखें और निर्धारित करें कि कौन सा ऑपरेटिंग सिस्टम है सिस्टम दर्ज करें: linux या windows फ...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async: ثغرة تنفيذ أوامر عن بُعد عبر إلغاء التسلسل POC مع إظهار النتائج لـ WebLogic تحديث التصحيح: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html إعادة إنتاج الثغرة: http://10.10.20.166:7001/async/AsyncResponseService curl -i...

CVE-2017-1000117

CVE-2017-1000117 परियोजना परिचय नेटवर्क सुरक्षा पाठ्यक्रम डिजाइन का एक विषय CVE-2017-1000117 भेद्यता का पुनरुत्पादन PoC+Exp Git + SSH भेद्यता परिचय: भेद्यता नाम: Git कमांड इंजेक्शन भेद्यता CNNVD क्रमांक: CNNVD-201708-670 खतरा स्तर: मध्यम CVE क्रमांक: CVE-2017-1000117 भेद्यता प्रकार: कमांड इंजेक्श...

PHPStudy-Backdoor

PHPStudy-Backdoor إعادة إنتاج ثغرة الباب الخلفي phpstudy dll backdoor for v2016 and v2018 0x01 scan search for backdoor dll D:\Pentester\phpStudypython check.py === .\php\php-5.2.17\ext\phpxmlrpc.dll === @eval%s'%s'; %s;@eval%s'%s'; === .\php\php-5.4.45\ext\phpxmlrpc.dll === @eval%s'%s';...

mssql-command-tool

أداة الاتصال الطرفي mssql | تنفيذ الأوامر مثال ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...

oracleShell

oracleShell تنفيذ أوامر قاعدة بيانات oracle بيئة الاختبار - صلاحيات DBA: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL...

CVE-2022-36779

حقن أوامر مُوثَّق لـ CVE-2022-36779 استمتع :...

DEBIAN-CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

AZL-106743 CVE-2026-105326 affecting package cups 2.4.19-1

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — P7M फ़ाइल प्रोसेसिंग में OS कमांड इंजेक्शन अवलोकन फ़ील्ड| विवरण ---|--- CVE ID| CVE-2025-69212 गंभीरता| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OS कमांड इंजेक्शन प्रभावित संस्करण| OpenSTAManager = 2.9.8 कमजोर फ़ंक्शन| XML::decodeP7M in src/Util/XML.php आक्रमण...

MiniPlasma-Runner

MiniPlasma-Runner Nightmare-Eclipse/MiniPlasma CVE-2020-17103 का संशोधित संस्करण, C2 उपयोग के लिए अनुकूलित। मूल PoC केवल डिस्क से चलता है। यह संस्करण execute-assembly के माध्यम से पूरी तरह से मेमोरी से चलता है, जिसमें पता लगने से बचने के लिए विभाजित-बाइनरी दृष्टिकोण है। अस्वीकरण यह उपकरण केवल...

CVE-2026-69212

CVE-2025-69212 — حقن أوامر نظام التشغيل في OpenSTAManager RCE إثبات المفهوم لاستغلال CVE-2025-69212 ، وهي ثغرة حقن أوامر نظام التشغيل OS Command Injection في OpenSTAManager ;echo ".p7m التنفيذ الناتج في القشرة: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ تم حقنها هنا ملاحظة:...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — Injection de commandes OS dans mediaclip.cgi d'AXIS Étude technique n-day et PoC — analyse technique post-correctif d'une vulnérabilité d'injection de commandes OS de score CVSS 7.1 dans l'API VAPIX Media Clip d'AXIS, redécouverte indépendamment et vérifiée par des tests en boîte...

CVE-2026-90252

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. When a Host Controller Interface HCI command is cancelled, the associated memory is not properly freed, leading to a memory leak. This issue can also prevent the management socket from being released, potentially...

CVE-2026-105326 Cups: cups: argument injection in mailto notifier via notify-recipient-uri

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

EUVD-2026-92637

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...