CVE-2022-34169

CVE-2022-34169 PoC Un PoC malléable et une solution pour le challenge SUpwn du SUCTF 2025. Basé sur ce problème du découvreur original Felix Wilhelm et cet article de blog thanat0s. Ce PoC essaie de moins s'appuyer sur des constantes codées en dur que les PoC existants. Si vous souhaitez envoyer ...

cve-2024-6387-poc

cve-2024-6387-poc une condition de course dans le gestionnaire de signaux du serveur OpenSSH sshd 7etsuo Description Un exploit pour CVE-2024-6387, ciblant une condition de course dans le gestionnaire de signaux du serveur OpenSSH sshd sur les systèmes Linux basés sur glibc. La vulnérabilité perm...

cve-2022-42889-text4shell

Installer maven - maven-linux 1. Installation de Maven pour créer le fat jar root@kitploit: mvn clean install 2. Construction Docker root@kitploit: docker build --tag=text4shell . 3. Exécution Docker root@kitploit: docker run -p 80:8080 text4shell 4. Tester l'application root@kitploit:...

cve-2022-42889-text4shell

Installer Maven - maven-linux 1. Installation de Maven pour créer le fat jar root@kitploit: mvn clean install 2. Construction de l'image Docker root@kitploit: docker build --tag=text4shell . 3. Exécution du conteneur Docker root@kitploit: docker run -p 80:8080 text4shell 4. Test de l'application...

CVE-2018-1335

CVE-2018-1335 Vulnérabilité RCE exécution de code à distance sur les serveurs Apache Tika-server avec des versions antérieures à 1.18 commandes: sudo bash install.sh python2 exploit.py...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE эксплойт CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и т.д. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows: git, GitHu...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Эксплуатация-CVE-2007-2447-на-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Описание Этот проект документирует моё тестирование на проникновение в рамках курса CMIT 386 в UMGC. Он посвящён эксплуатации уязвимости Samba SMB usermapscript CVE-2007-2447 на Metasploitable 2 с помощью...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner pour CVE-2019-0708-RDP-RCE-Exploit Ce script est écrit pour améliorer ce script PoC https://github.com/zerosum0x0/CVE-2019-0708 Le binaire rdesktop mettait trop de temps à expirer, donc je voulais qu'il expire plus rapidement L'analyse de plusieurs IP n'était pas possible, maintenant...

nmap-scripts

nmap-scripts cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 취약점을 위한 nmap 스크립트 CVE-2020-0796 Microsoft Server Message Block 3.1.1SMBv3 프로토콜이 특정 요청을 처리하는 방식에 원격 코드 실행 취약점이 존재하며, 일명 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'라고 합니다. CVE-2019-7238 Sonatype Nexus...

CVE-2020-14882

CVE-2020-14882 Ce script permet l'exécution de code à distance RCE sur Oracle WebLogic Server à l'aide d'une requête GET non authentifiée. Il exploite la vulnérabilité CVE-2020-14882. En exécutant des commandes arbitraires, un attaquant peut obtenir un accès non autorisé au serveur. Détails de...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit Cet exploit est une vulnérabilité d'exécution de code à distance dans Ruby-on-Rails lors de l'utilisation de render sur des données fournies par l'utilisateur. Il est écrit en python3, et n'oubliez pas d'installer la bibliothèque requests. voici la commande...

halo-2.25.4-CVE-2026-67919

Аутентифицированное удалённое выполнение кода RCE через непроверенную установку плагина по URI в Halo 2.25.4 1. Сводка по уязвимости Критическая уязвимость безопасности обнаружена в версии Halo 2.25.4. Приложение предоставляет административную конечную точку для установки или обновления плагинов...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote code execution via PSD file parsing integer overflow

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 이 도구들은 오픈소스입니다. 리코딩할 수 있지만 작성자의 도구를 삭제하지 않도록 기억하세요. 이 도구들은 무료이며 판매용이 아닙니다!!! 결과 셸은 당신의 목록에 달려 있습니다!!! 여기서 Jenderal92는 웹사이트 시스템에 손상을 일으키는 도구의 오용에 대해 책임지지 않습니다. 가볍든 무겁든 모든 것은 사용에 달려 있습니다!!! 기부 : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money :...

CVE-2026-27597

CVE-2026-27597 - 버전 원격 코드 실행 빠른 사용법 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 악용 참고 사항 심각도: CRITICAL CVSS: 10.0 영향: 기밀성, 무결성, 가용성 게시일: 2026-02-25 기술 요약 Enclave는 안전한 AI 에이전트 코드 실행을 위해 설계된 보안 JavaScript 샌드박스입니다. 버전 2.11.1 이전에는 @enclave-vm/core에 의해...