grep -l "Command Injection" ./machines [4] sorted: date ▼

namediffosdatetags

Paperwork easy linux 2026-07-11not yet retired

DevHub medium linux 2026-05-30not yet retired

VariaType medium linux 2026-03-14 Exploited fonttools CVE-2025-66034 designspace path traversal to write a PHP webshell, escalated to user via FontForge archive command injection, then root via setuptools PackageIndex arbitrary file write to cron.d. fonttools·cve-2025-66034·path-traversal·php-injection·lfi·git-exposure·+5 Overwatch medium windows 2026-01-24 Windows AD DC with anonymous SMB share leaking .NET app credentials, MSSQL linked server DNS poisoning for credential capture, and WCF SOAP service command injection for SYSTEM access. active directory·mssql·wcf·command injection·dns poisoning·linked server·+1

no machines match that filter