186889 matches found
patch-CVE-2026-14290
Patch: CVE-2026-14290 Vulnerability Details CVE : CVE-2026-14290 Product : Palo Alto PAN-OS Description : Command injection in GlobalProtect Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-05-20 Status| deployed Deployed To| Production Validated By| SecOps Team...
POC-CVE-2026-93674
Description POC-CVE-2026-93674 Authenticated Blind command injection proof of concept exploit code Usage python3 poc.py -u -uname -pword -c -a "" PoC Execution PoC Output...
CVE-2026-27626-PoC
CVE-2026-27626 — OliveTin OS Command Injection PoC Summary | ---|--- CVE ID| CVE-2026-27626 Component| OliveTin Vulnerability Class| CWE-78: Improper Neutralization of Special Elements used in an OS Command CVSS 3.1| 9.9–10.0 Critical — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Versions| All...
USN-8874-1: sg3_utils vulnerability
Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...
USN-8874-1 sg3-utils vulnerability
Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...
CVE-2025-69212-PoC
CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versions Usage CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-102255 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this...
CVE-2025-7775-PoC
CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...
CVE-2026-3300
CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...
vsftpd-cve-2011-2523-lab
Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...
CVE-2012-2982
CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...
cve-2025-50946
cve-2025-50946 Exploit script for CVE-2025-50946 OliveTin get-theme RCE. The character requirements are finnicky and many commands that include multiple arguments may not be executed properly. I haven't taken the time to run down the root cause or try to make the script more robust. Holler at me ...
CVE-2026-11417-AWS-CDK-RCE
Supply Chain Command Injection in AWS CDK's NodejsFunction CVE-2026-11417 Author: Hesham Ashraf @HeshamASH Date: June 10, 2026 Severity: High CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 — Improper Neutralization of Special Elements used in an OS Command OS Command Injection Affected Package: aws-cdk-l...
CVE-2026-105050
A flaw was found in PeaZip. When operating in certain non-default configurations, the application mishandles quotation characters within archive filenames. An attacker could exploit this vulnerability by enticing a user to open a specially crafted archive file, triggering operating system OS...
CVE-2026-11834
CVE-2026-11834 PoC TP-Link DHCP Option 66 Unauthenticated RCE CVE-2026-11834 Overview A command injection vulnerability CWE-78 in the DHCP Option 66 "TFTP Server Name" handling of TP-Link router firmware allows an unauthenticated attacker on the same network segment to execute arbitrary commands ...
CVE-2023-26039
CVE-2023-26039 Description ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl in /web/api/app/Controller/HostController.php. A...
CVE-2026-10520
🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...
CVE-2026-46420
CVE-2026-46420 PoC Command injection in shivammathur/setup-php when the PHP version is loaded from repository controlled files. Affected: = 2.25.0, = 2.37.1 PoC The target repository already has a vulnerable workflow that checks out pull request contents and runs [email protected]. The...
