CVE-2025-36604 PoC — Dell Unity 操作系统命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36604.yaml

Associated Vulnerability

Title:Dell Unity 操作系统命令注入漏洞 (CVE-2025-36604)
Description:Dell Unity是美国戴尔（Dell）公司的一套虚拟Unity存储环境。 Dell Unity 5.5及之前版本存在操作系统命令注入漏洞，该漏洞源于OS命令注入，可能导致执行任意命令。

Description

Dell Unity, version(s) 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

File Snapshot


 id: CVE-2025-36604

info:
  name: Dell UnityVSA < 5.5 - Remote Command Injection
  author: Dhiyanesh

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!