exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Remote Command Execution ProFTPD è un demone FTP altamente configurabile per Unix e sistemi operativi simili a Unix. ProFTPD è nato dal desiderio di avere un server FTP sicuro e configurabile. È stato ispirato da una notevole ammirazione per il server web Apache. A...

exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Esecuzione di codice in remoto Roundcube è un software di webmail open-source ampiamente distribuito, utilizzato da molte organizzazioni e aziende in tutto il mondo. Lo specchio su SourceForge, ad esempio, conta più di 260,000 download negli ultimi 12 mesi, che rappresenta...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Неаутентифицированное удалённое выполнение кода Cacti Неаутентифицированное удалённое выполнение кода через обход аутентификации и внедрение команд в Cacti 1.2.23 и 1.3.0 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Этот скрипт предназначен для аудита безопасности систем. Используйте этот скрипт...

cve-2020-7247

cve-2020-7247 Titolo exploit: OpenSMTPD 6.6.2 - Esecuzione di codice remoto. La nuova data: 2020-01-29. Autore exploit: 1F98D. Autore originale: Qualys Security Advisory. Homepage del fornitore: https://www.opensmtpd.org/. Link del software:...

HeimShell

HeimShell CVE-2023-51803 HeimShell ist ein Exploit für CVE-2023-51803, der eine beliebige Datei-Upload-Schwachstelle in LinuxServer.io Heimdall ≤ 2.5.6 ausnutzt. Es erkennt automatisch die Zielversion und warnt entweder vor der Ausnutzbarkeit oder holt remote eine PHP-Shell, die durch SHELLURL...

EUVD-2026-66743

An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...

CVE-2026-52103

SimpleX Chat versions before v6.5 are affected by a zero-click remote code execution vulnerability in the /Terminal/Notification.hs component. An attacker can send a crafted payload in a text message to execute arbitrary commands in the context of the application without any user interaction. The...

EUVD-2026-66747

JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...

CVE-2026-75411

JeecgBoot v3.9.2 is vulnerable to remote command execution in the CodeNode component of its AI Flow module. The component supports Groovy script execution, and while the SecurityCheck class applies a blacklist to intercept dangerous calls, the dynamic nature of Groovy allows the blacklist to be c...

CVE-2026-75363

Comfast CF-WR630AX v.2.7.0.2 is vulnerable to remote arbitrary code execution through the binaries /usr/bin/webmgnt and /cgi-bin/mbox-config , specifically via the timestr and display_n parameters. The underlying root cause is not further detailed in the provided documents. A public proof-of-conc...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

CVE-2026-39275

Cockpit CMS versions ≤ 2.13.5 are affected by a stored XSS (CWE-79) in the item.php, field-select.js, and tags.js components. Field render() outputs are passed to Vue's v-html directive without output encoding , allowing a low-privilege editor to inject a persistent payload that fires for every a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-core (UTSA-2026-093032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093032 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

PT-2026-81951

Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.17 Fusion Builder versions prior to 3.17 Description An arbitrary file write issue exists when the Avada theme is used alongside the Fusion Builder plugin. A chain of authorization and input validation weaknesses allo...

PT-2026-82214

ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIAS/AuthShibboleth/resources/shib logout.php runs in a context that ilInitialisation exempts from authentication, and its logout-notification handler locates the session to...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange Per questo laboratorio, l'obiettivo era esercitarsi nel triage di una vulnerabilità reale e nota, come farebbe un team di sicurezza: leggere i dettagli della CVE, comprendere il punteggio CVSS e ragionare su quanto sia effettivamente rischios...

CVE-2021-43503

Avviso La vulnerabilità è stata revocata Override Questo riguarda CVE-2021-43503, non sono riuscito a replicare questa vulnerabilità attraverso exp Requisiti PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c...

CVE-2022-22947-POC

Spring-Cloud-Gateway-CVE-2022-22947 Avviso di sicurezza per la vulnerabilità di esecuzione remota di codice in Spring Cloud Gateway. Questa vulnerabilità si verifica quando Spring Cloud Gateway abilita ed espone l'endpoint Gateway Actuator: le applicazioni che utilizzano Spring Cloud Gateway...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...