Curated security research, vulnerabilities, advisories and tools for practitioners.

#command-injection

Security coverage tagged command-injection.

1.

simple-git Command Injection to Remote Code Execution PoC (CVE-2026-6951)

vulnerability | High | 2026-09-28 08:48 | CVE-2026-6951 | github.com | Original ↗ | .md | #rce | #supply-chain | #poc

2.

Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE

research | 2026-09-24 00:00 | starlabs.sg | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

3.

How to Chain Vulnerabilities for RCE: From Image Metadata to Complete System Compromise

research | 2026-06-22 11:46 | hackenproof.com | Original ↗ | .md | #rce | #pentesting | #cve

4.

LibreNMS Authenticated RCE (< 26.5.0)

research | 2026-06-13 02:35 | projectblack.io | Original ↗ | .md | #rce | #web-security | #command-injection

5.

Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis

blog | 2026-06-05 00:00 | CVE-2026-34908 | bishopfox.com | Original ↗ | .md | #rce | #vulnerability-research | #command-injection

6.

Escalating a Windows driver registry bug to a kernel write primitive

blog | 2026-05-05 11:00 | blog.trailofbits.com | Original ↗ | .md | #code-review | #privilege-escalation | #windows-security

7.

20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others

blog | 2026-03-05 00:00 | CVE-2026-28769 | abdulmhsblog.com | Original ↗ | .md | #rce | #pentesting | #vulnerability-research

8.

Samsung Tizen OS | Version Through 9.0

blog | 2026-02-24 00:00 | bishopfox.com | Original ↗ | .md | #rce | #vulnerability-research | #iot

9.

CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways

vulnerability | 2026-02-12 00:00 | CVE-2026-1731 | netspi.com | Original ↗ | .md | #rce | #patching | #command-injection

10.

Deep Dive into Arista NG Firewall Vulnerabilities

research | 2026-02-09 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #rce | #command-injection

11.

Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)

vulnerability | Medium | 2025-10-20 00:00 | CVE-2025-59419 | depthfirst.com | Original ↗ | .md | #vulnerability-research | #java | #command-injection

12.

How to find RCE: A list of pathways and detection methods

blog | 2025-10-03 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #rce | #exploitation

13.

Dojo challenge #43 CCTV Manager winners & writeup

blog | 2025-08-21 11:48 | yeswehack.com | Original ↗ | .md | #rce | #ctf | #dojo

14.

Dojo challenge #41 - Ruby treasure winners & writeup

blog | 2025-06-04 14:53 | yeswehack.com | Original ↗ | .md | #bug-bounty | #ruby | #ctf

15.

Drag and Pwnd: Leverage ASCII characters to exploit VS Code

research | 2025-05-01 12:27 | portswigger.net | Original ↗ | .md | #command-injection | #terminal | #vs-code

16.

Remote code execution (RCE) 101

vulnerability | 2025-03-26 12:00 | bugcrowd.com | Original ↗ | .md | #rce | #web-security | #ssti

17.

Command injection in 2024 unpacked

blog | 2024-11-24 00:00 | aikido.dev | Original ↗ | .md | #secure-coding | #web-security | #owasp

18.

Breaking Down the OWASP Top 10: Injection

blog | 2024-11-21 18:14 | hackerone.com | Original ↗ | .md | #xss | #injection | #ssti

19.

Dojo challenge #36 - Shell Escape winners and writeup

blog | 2024-11-08 09:00 | yeswehack.com | Original ↗ | .md | #rce | #access-control | #ctf

20.

CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability

vulnerability | 2024-09-16 15:26 | CVE-2024-8190 | horizon3.ai | Original ↗ | .md | #cloud | #vulnerability-research | #command-injection

21.

CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive

vulnerability | 2024-05-28 12:08 | CVE-2024-23108 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #command-injection | #fortinet

22.

CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive

vulnerability | 2024-05-20 11:44 | CVE-2023-34992 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #command-injection | #fortinet

23.

Dojo challenge #30 winners!

vulnerability | 2024-03-12 12:38 | yeswehack.com | Original ↗ | .md | #rce | #ctf | #dojo

24.

[CVE-2023-26067] Lexmark Command Injection Vulnerability ZDI-CAN-19470 Pwn2Own Toronto 2022

vulnerability | 2023-08-10 20:41 | CVE-2023-26067 | horizon3.ai | Original ↗ | .md | #zero-day | #vulnerability-research | #exploit

25.

The first step to PWN2OWN - A sad one

blog | 2022-12-09 03:33 | blog.viettelcybersecurity.com | Original ↗ | .md | #command-injection | #iot-security | #netgear

26.

Hunting for bugs in VMware: View Planner and vRealize Business for Cloud

vulnerability | 2022-02-15 14:06 | swarm.ptsecurity.com | Original ↗ | .md | #cloud | #rce | #vulnerability-research

27.

Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings

research | 2021-09-29 13:57 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #vulnerability-research | #cve

28.

Thành phố thông minh có thể bị hack như thế nào

blog | 2021-09-23 09:34 | blog.viettelcybersecurity.com | Original ↗ | .md | #command-injection | #iot-security | #vulnerability-analysis

29.

RetroArch for Windows, Versions 1.9.0 - 1.9.4 Advisory

vulnerability | 2021-06-15 00:00 | bishopfox.com | Original ↗ | .md | #windows | #powershell | #vulnerability

30.

Swarm of Palo Alto PAN-OS vulnerabilities

research | 2021-02-11 13:54 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #cve | #command-injection