Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script This repository contains a Python script designed to automate the exploitation of the CVE-2007-2447 vulnerability on Samba servers versions 3.0.20 to 3.0.25rc3. This tool has been developed for strictly educational purposes and authorized penetratio...

Langflow AI - Unauthenticated Remote Code Execution

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. id: CVE-2025-3248 info: name: Langflow AI - Unauthenticated Remote Code Execution author: nvn172...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

ConnectWise ScreenConnect <= 23.9.7 - Path Traversal

ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...

Roundcube Webmail - Remote Code Execution

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...

Apache ActiveMQ - Remote Code Execution

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

Apache OFBiz - Improper Authorization & Remote Code Execution

Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met...

CraftCMS - Remote Code Execution

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...

DrayTek - Remote Code Execution

DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta devices allow remote code execution as root without authentication via shell metacharacters to the cgi-bin/mainfunction.cgi URI. id: CVE-2020-8515 info: name: DrayTek - Remote Code Execution...

Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution

Zoho ManageEngine ADSelfService Plus version 6113 and prior are vulnerable to a REST API authentication bypass vulnerability that can lead to remote code execution. id: CVE-2021-40539 info: name: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution author:...

CVE-2025-11170

CVE-2025-11170 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 🚀 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 📝 Description The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

CVE-2025-47812-Research

CVE-2025-47812 — Wing FTP Server RCE Research Context Cybersecurity observation internship carried out within the Akasec club 1337 Khouribga — July/August 2025. Vulnerability studied CVE : CVE-2025-47812 CVSS Score : 10.0 Critical Affected software : Wing FTP Server 7.4.4 Type : Remote Code...

CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 Mass Payload Attack React2Shell A modified Mass RCE Exploit script for CVE-2025-55182 React2Shell targeting Next.js applications. This tool is a modification of the original PoC script by pax-k. While the original script targets a single host, this version is enhanced to support ma...

CVE-2023-27163---Maltrail-0.53---RCE

CVE-2023-27163---Maltrail-0.53---RCE root@kitploit: Create by TheAlchimist cve-2023-27163-maltrail.py for reverse shell...

CVE-2024-7593

CVE-2024-7593 描述： CVE-2024-7593 是一个影响多个 Pulse Secure 产品（包括 Pulse Secure VPN）的严重漏洞。该漏洞允许具有管理界面访问权限的已认证攻击者在受影响的服务器上执行任意命令。这可能导致恶意代码的执行，从而破坏系统的完整性和可用性。 技术详情 类型：远程代码执行（RCE）。 严重性：严重（CVSS：9.8）。 受影响版本：特定版本的 Pulse Secure VPN 受到影响；请查阅 Pulse Secure 的安全公告以获取详细信息。 潜在影响 利用此漏洞的攻击者可能： 完全控制受影响的服务器。 重定向流量或操纵数据。...

CVE-2026-58138

🚨 CVE-2026-58138 — 未认证远程代码执行 🔥 Conductor 中的严重未认证远程代码执行漏洞 受影响版本：3.21.21 → 3.30.2 📌 概述 CVE-2026-58138 是一个影响 Conductor / Orkes Conductor 的严重未认证远程代码执行（RCE）漏洞。 该漏洞存在于应用程序对通过 GraalVM 评估的用户可控脚本表达式的处理中。不安全的评估器配置可能会将主机功能暴露给攻击者控制的表达式。 在易...

CVE-2024-12356

Ejecución Remota de Código No Autenticada en BeyondTrust Remote Support y Privileged Remote Access mediante Inyección de Argumentos y una Omisión del Escape de Cadenas de PostgreSQL Advertencia Ética: Solo para fines de investigación, educativos y de pruebas autorizadas. No lo utilice contra...

CVE-2026-27876

CVE-2026-27876：Grafana SQL 表达式任意文件写入导致远程代码执行 CVSS 9.1 严重 | 任意文件写入 | 远程代码执行 演示 https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 概述 Grafana 的 SQL 表达式功能（sqlExpressions 开关）使用进程内 SQL 引擎（dolthub/go-mysql-server），其 AST 白名单存在缺陷。SetOp 节点（UNION ALL）能通过验证，且其 walkSubtree 不会遍历...

CVE-2015-8562

CVE-2015-8562 - 反向 Shell Python 漏洞利用：Joomla 1.5 - 3.4.5 对象注入 RCE X-Forwarded-For 头： root@kitploit: 漏洞日期：2015年12月17日 漏洞利用作者：anarc0der 版本：Joomla 1.5 至 3.4.5 CVE：CVE-2015-8562 使用方法： root@kitploit: 打开一个终端并使用 nc 监听：$ nc -lnvp 4444 打开另一个终端并执行漏洞利用： python3 rce.py --target='目标' --ip='IP' --port=4444 PoC...