CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability caused by an incomplete fix for CVE-2024-41726. An attacker who can log in to a Windows system with the affected product installed may execute arbitrary code on another Windows system that also has the product install...

EUVD-2026-65309

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System per WordPress = 4.962 – Lettura e cancellazione arbitraria di file non autenticata Descrizione Il tema WPLMS Learning Management System per WordPress è vulnerabile alla lettura e cancellazione arbitraria di file a causa di una validazione...

EUVD-2026-65307

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68960

A stack-based buffer overflow vulnerability affects SKYSEA Client View and SKYMEC IT Manager , two Windows-based IT management products. An authenticated attacker who can log in to a Windows system running the affected software may be able to execute arbitrary code on a different Windows host tha...

how-to-check-patch-secure-log4j-CVE-2021-44228

Come-verificare-log4j-CVE-2021-44228 Cos'è log4j ? LOG4J è un software Apache open-source basato su Java utilizzato per i servizi di logging. Cos'è la vulnerabilità log4j CVE-2021-44228 ? La vulnerabilità Log4j consente l'esecuzione remota di codice semplicemente digitando una specifica stringa i...

CVE-2025-55182-bypass

CVE-2025-55182 Bypass dell'header Bypass dell'header Next-Action per CVE-2025-55182. Consente di ottenere RCE React RSC senza header distintivi, aggirando le regole WAF. Scoperta chiave L'header Next-Action NON è richiesto per lo sfruttamento...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warnung Dies ist eine Proof-of-Concept-Umgebung und ein Exploit für bekannte CVEs, ausschließlich zu Lern- und Bildungszwecken. Verwenden Sie diese Skripte oder Techniken nicht auf Systemen, die Ihnen nicht gehören oder für die Sie keine ausdrückliche...

CVE-2019-9978

CVE-2019-9978 - Plugin Social Warfare WordPress RCE system'cat /etc/passwd' ✅ Passo 2 – Avviare un Server HTTP Python...

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution

CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution The attacker machine is Kali Linux and Windows Server 2008 R2 as the target machine. Import the windows 2008 R2 Server from the given https://drive.google.com/drive/folders/146ViggeQl0pSpzotcAhpd3h9UP7fFOxJ?usp=sharing into your virtual b...

chakra-exploit-framework

Chakra Exploitation Framework Questo repository contiene il Browser Exploitation Framework che ho scritto per prepararmi al corso EXP-401. Il framework ha come target il motore Chakra, che faceva parte di Edge fino al passaggio a v8 nel 2019. La vulnerabilità demo utilizzata nel framework è la Ty...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduzione In questo documento viene discussa in dettaglio la vulnerabilità di Pipenv CVE-2022-21668. Le sezioni seguenti trattano il codice difettoso nel file pipenv/utils.py che apre la porta a vari attacchi RCE e anche la recente correzione che...

CVE-2025-55182

CVE-2025-55182 इस रिपॉजिटरी में CVE-2025-55182 का एक PoC प्रजनन reproduction है, जो React Server Components RSC में एक गंभीर सुरक्षा भेद्यता है जो बिना प्रमाणीकरण के मनमाना कोड निष्पादन arbitrary code execution की अनुमति देता है। विवरण यह भेद्यता इस बात में मौजूद है कि React Server Components...

Vulnerability-Research-CVE-2017-0144

Vulnerability-Research-CVE-2017-0144 LAB: ANGRIFF AUF DAS WINDOWS-BETRIEBSSYSTEM BASIEREND AUF DER SMB-PROTOKOLLSCHWACHSTELLE. I. BESCHREIBUNG In diesem Lab verwenden wir zwei Rechner, um einen Angriff zu simulieren, der auf einer Schwachstelle im SMB-Protokoll des Windows-Betriebssystems basiert...

CVE-2021-1675

CVE-2021-1675 تطبيق Impacket لـ PrintNightmare PoC الذي أنشأه في الأصل Zhiniang Peng @edwardzpeng و Xuefeng Li @lxf02942370 تم اختباره على Domain Controller محدّث بالكامل بنظام 2019 تنفيذ ملفات DLL الضارة عن بُعد أو محليًا التثبيت قبل تشغيل الاستغلال، تحتاج إلى تثبيت نسختي من Impacket، وبعد ذلك...

CVE-2016-3088

CVE-2016-3088 Apache ActiveMQ Exploit für Remote-Codeausführung Beschreibung Die Fileserver-Webanwendung in Apache ActiveMQ 5.x vor 5.14.0 erlaubt es entfernten Angreifern, beliebige Dateien über eine HTTP-PUT-Anfrage gefolgt von einer HTTP-MOVE-Anfrage hochzuladen und auszuführen. Autor Alexandr...

PHPUnit-GoScan

🛡️ PHPUnit Go Scanner CVE-2017-9841 Ein schneller, in Go geschriebener Multithread-Scanner zur Erkennung exponierter und verwundbarer eval-stdin.php-Endpunkte in PHPUnit CVE-2017-9841. Unterstützt das Scannen mehrerer Domains mit paralleler Ausführung und automatischer Protokollerkennung. 🖼...

cve-2025-3248-exploit

CVE-2025-3248: Scanner di vulnerabilità RCE non autenticata di Langflow Un framework di exploitation completo in Python per testare e dimostrare CVE-2025-3248 , una vulnerabilità critica di esecuzione remota di codice non autenticata in Langflow versioni ≤ 1.3.0. 🔴 Panoramica della vulnerabilità...