Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS dylib Command injection Description An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. using dylib DYLDINSERTLIBRARIES=exploitcombined.dylib...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX-Breaker PoC y código automatizado para explotar CVE-20...

Apache Struts2 S2-061 RCE (CVE-2020-17530)

Exploits CVE-2020-17530 S2-061 in Apache Struts 2.0.0–2.5.25: forced OGNL evaluation in tag attributes yields remote command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts2 S2-061 forced OGNL RCE CVE-2020-17530.""" import re import urllib.parse from kittysploit import from...

CVE-2026-48711

A flaw was found in SSHFS, a network filesystem client. An attacker can exploit this vulnerability by providing a specially crafted mount source that includes argument delimiters. This improper handling of the mount source allows for argument injection, leading to the execution of arbitrary...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

CVE-2022-36804

CVE-2022-36804 Atlassian Bitbucket Server and Data Center - Command Injection Vulnerability CVE-2022-36804 In affected versions of Atlassian Bitbucket Server and Data Center a Command Injection Vulnerability exists in multiple API endpoints where an attacker with access to a public repository or...

Exploit for CVE-2026-105134

CVE-2026-105134-style OS Command Injection Lab A minimal, sel...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: IB/isert: The full-feature receive buffers are posted after session registration. isertputlogintx posts the full-feature receive buffers before transportregistersession is executed. As a result, an initiator that does not wait fo...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server could trigger a heap buffer overflow in FreeRDP clients by using the GDI surface pipeline e.g., xfreerdp to send an RDPGFX ClearCodec surface command with an out-of-bounds destination...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed use-after-free issue. Fixed potential use-after-free in l2caplecommandrej...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a potential security issue involving infinite recursion in the MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 addresses this issue...

Astra Linux – Vulnerability in OpenSSH

In SSH in OpenSSH before version 9.6, OS command injection could occur if a user name or host name contained shell metacharacters, and this name was referenced by an expansion token in certain situations. For example, a untrusted Git repository might contain a submodule with shell metacharacters ...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fixed a null pointer dereference in btintelreadversion. If hcicmdsyncComplete is triggered and skb is NULL, then hdev-reqskb will also be NULL, which will cause this issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nbd: fixed the race condition between timeout and normal completion. If the request for a timeout is handled by nbdrequeuecmd, normal completion must be stopped to avoid completing this queued request. This can lead to other...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: Discarded command completions in internal errors. Fixed the use of “free” after a device enters an internal error state. Avoid calling the completion handler in this case, as the device will flush the command interfa...