n8n Webhooks - Remote Code Execution

n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker,...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

Burp_CVE-2025-31324

Extensão Burp Suite CVE-2025-31324 Visão Geral Esta extensão do Burp Suite baseada em Python foi projetada para detectar a presença da CVE-2025-31324 , uma vulnerabilidade crítica no componente Metadata Uploader do SAP NetWeaver Visual Composer. A vulnerabilidade permite a execução remota de códi...

CVE-2025-55182

Scanner Ultimate React2Shell Scanner Profissional de Vulnerabilidade RCE RSC Next.js para CVE-2025-55182 🎯 Visão Geral O React2Shell Ultimate é um scanner abrangente de vulnerabilidades para CVE-2025-55182 - uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta aplicações Next.js...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

CVE-2024-42640

CVE-2024-42640 angular-bug CVE-2024-42640 Exécution de code à distance non authentifiée via la bibliothèque Angular-Base64-Upload pour plus de détails : blog Introduction Les versions de angular-base64-upload antérieures à v0.1.21 sont vulnérables à une exécution de code à distance non authentifi...

CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

CVE-2025-24893 - XWiki Unauthentifizierter RCE-Exploit PoC ⚠️ Unauthentifizierte Remotecodeausführung in XWiki 🛠️ PoC-Implementierung von @dollarboysushil 💡 Übersicht CVE-2025-24893 ist eine kritische RCE-Sicherheitslücke in XWiki, verursacht durch unsichere Behandlung von Groovy-Ausdrücken im...

CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Exploit Dieses Skript nutzt eine Remote-Code-Execution-Schwachstelle in SPIP Version 4.2.8 über den porteplumeprevisu-Endpunkt aus. Die Schwachstelle ermöglicht es nicht authentifizierten Angreifern, PHP-Code durch die Vorschau-Wiedergabe...

CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama con server di registro malintenzionato Scopri di più su Probllama: vulnerabilità di esecuzione remota di codice in Ollama CVE-2024-37032 – Panoramica e mitigazioni Ambiente di vulnerabilità root@kitploit: docker run -d -v ollama:/root/.ollama -p 11434:11434...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...

cve-2019-6250-lab

CVE-2019-6250 — laboratorio RCE pre-autenticazione libzmq Catena RCE funzionante end-to-end + laboratorio riproducibile per CVE-2019-6250 , l'heap-buffer-overflow pre-autenticazione in libzmq's v2decodert::sizeready. Un overflow aritmetico di puntatore uint64t consente a un peer non autenticato d...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE स्टैक ओवरफ़्लो → RCE लैब CVE-2019-13132 के लिए पूर्ण-अंत तक काम करने वाला RCE एक्सप्लॉइट + पुनरुत्पादन योग्य लैब, जो libzmq के CURVE INITIATE हैंडशेक हैंडलर में स्टैक बफ़र ओवरफ़्लो है। एक हमलावर जो सर्वर की दीर्घकालिक सार्वजनिक कुंजी जो डिज़ाइन के अनुसार एक...

apache-activemq-rce-research

Apache ActiveMQ Classic — Ricerca RCE Archivio di ricerca privato per la catena di esecuzione remota di codice Jolokia → addNetworkConnector → xbean/Spring-XML Apache ActiveMQ Classic CVE-2026-34197 e il suo bypass della patch CVE-2026-42588, più un audit completo di auto-ricerca della versione...

CVE-2021-44228-Demo

CVE-2021-44228-Demo مثال على استغلال CVE-2021-44228 لحقن الكود عن بُعد عبر كل من RMI و LDAP. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit تشغيل...

CVE-2024-25600

CVE-2024-25600 बिना प्रमाणीकरण के रिमोट कोड निष्पादन – Bricks उपयोग: python3 bricks.py उदाहरण: python3 bricks.py https://example.org संदर्भ: https://github.com/Chocapikk/CVE-2024-25600...

CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 e CVE-2026-47291 PoC HTTP.sys Vulnerabilità Denial of Service di HTTP.sys Vulnerabilità di Esecuzione Remota di Codice di HTTP.sys A causa delle restrizioni di dimensione dei file di GitHub, i video dimostrativi per questo PoC CVE-2026-49160 sono ospitati come allegati nelle Releas...

CVE-2025-55182-Lab

Laboratório CVE-2025-55182 Um laboratório prático para explorar CVE-2025-55182 React2Shell - Execução Remota de Código em Componentes de Servidor React. ⚠️ Aviso Legal Apenas para fins educacionais. Teste apenas em sistemas que você possui. Início Rápido root@kitploit: Clone and start git clone...

log4j-cve-2021-44228-sample

Esempio di exploit log4j Questo repository contiene un esempio funzionante di abuso del recente exploit log4j. Non esegue un vero e proprio codice remoto, ma mostra la facilità con cui un attaccante può far sì che un'applicazione vulnerabile chiami il proprio server ldap. Utilizza l'eccellente ap...

CVE-2019-7214

CVE-2019-7214 Esecuzione di codice remoto nella deserializzazione .NET per il sistema SmarterMail. Raccolta In questo repository è disponibile una raccolta di proof of concept per l'exploit. Alcune potrebbero funzionare come previsto senza modifiche, altre potrebbero richiederle...

apche_unomi_rce

CVE-2020-13942 भेद्यता के बारे में मूल ब्लॉग पोस्ट: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ यहाँ दो RCE वेक्टर हैं: MVEL इंजेक्शन के माध्यम से और OGNL इंजेक्शन के माध्यम से। दोनों वेक्टर अलग-अलग कोड को लक्षित करते हैं, हालाँकि पेलोड अपेक्षाकृत सम...