People

CVE-2024-39914 – Unauthenticated Command Injection in FOG Project's export.php

offsec.com

Discover details about CVE-2024-39914, a critical unauthenticated command injection vulnerability in FOG Project ≤ 1.5.10.34. Learn how attackers can exploit export.php to execute system commands or deploy persistent webshells.

Visit Site

People offsec.com

CVE-2024-39914 – Unauthenticated Command Injection in FOG Project's export.php
PeopleCVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injectionoffsec.com PeopleCVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Executionoffsec.com PeopleCVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulationoffsec.com PeopleCVE-2024-46986 – Arbitrary File Write in Camaleon CMS Leading to RCEoffsec.com PeopleCVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluenceoffsec.com PeopleCVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usageoffsec.com ResourcesCommunity Extensionsduckdb.org ResourcesDot Commandsduckdb.org ResourcesCommunity Extensionsduckdb.org ResourcesCommunity Extensionsduckdb.org ResourcesCommunity Extensionsduckdb.org ResourcesCommand Lineduckdb.org ResourcesCommand Lineduckdb.org ResourcesBuilding DuckDB from Sourceduckdb.org Products & ServicesDUCKDB™ Trademark use guidelinesduckdb.org Products & ServicesDevelopment Roadmapduckdb.org ResourcesR Clientduckdb.org ResourcesMotherDuck Extensionduckdb.org ResourcesCommand Line Clientduckdb.org ResourcesClient Overviewduckdb.org