CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

PoC-2023-43208

CVE-2023-43208-EXPLOIT Exploit di Remote Code Execution RCE su Mirth Connect ⚠️ SOLO PER USO DIDATTICO E DI LABORATORIO ⚠️ Una proof-of-concept per CVE-2023-43208, una vulnerabilità di remote code execution in Mirth Connect precedente alla versione 4.4.1. 🚨 IMPORTANTE DISCLAIMER LEGALE Questo...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING Mitigazione temporanea di emergenza per CVE-2026-60137 e CVE-2026-63030 wp2shell کاهش مخاطره اضطراری و موقت برای زنجیره آسیب‌پذیری wp2shell 🇬🇧 Descrizione in Inglese Questo plugin leggero per WordPress funge da patch virtuale temporanea mitigazione contro la catena...

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

EUVD-2026-64704

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

CVE-2026-78181

CVE-2026-78181 is a prototype pollution vulnerability in ractivejs ractive versions up to 1.4.4 . The flaw resides in the Ractive#set function within the Keypath Handler component, where improper control of object prototype attribute modification allows a remote, unauthenticated attacker to injec...

CVE-2023-20052

Exploit CVE-2023-20052 Questo repository contiene un Proof of Concept PoC funzionale per CVE-2023-20052 , che colpisce ClamAV versioni 1.0.0 e precedenti, 0.105.1 e precedenti, e 0.103.7 e precedenti. Dimostrazione Utilizzo root@kitploit: git clone https://github.com/tralsesec/CVE-2023-20052.git ...

CVE-2026-78177

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-55182-exploit

CVE-2025-55182-exploit TL;DR Questo strumento è solo per test di penetrazione legali. Non intraprendere attività illegali. Come usare python3 exploit.py Video dimostrativo...

ExploitDotNetDCOM

ExploitDotNetDCOM c James Forshaw 2014 Uno strumento per sfruttare .NET DCOM per EoP e RCE. È stato corretto nelle ultime versioni di .NET. Solo a scopo informativo. Tutto il codice è concesso in licenza GPLv3...

CVE-2026-16723

CVE-2026-16723 Exploit Eine eigenständige C++17-Implementierung für CVE-2026-16723 , eine kritische Sicherheitslücke, die Fastjson -Versionen 1.2.68 – 1.2.83 betrifft. Anforderungen Linux oder WSL unter Windows C++17-kompatibler Compiler GCC 7+ oder Clang 5+ CMake 3.10 oder neuer Systempakete:...

CVE-2025-15001-Exploit

CVE-2025-15001-Exploit...

EUVD-2026-64694

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

CVE-2026-78177

TanStack devtools-vite 0.7.0 is affected by an OS command injection vulnerability in the installPackage function within packages/devtools-bundler-core/src/package-manager.ts (component: Development Devtools Event Bus). The root cause is unsanitized handling of the packageName argument, allowing a...

CVE-2026-43499-A36

CVE-2026-43499-A36 Eigenständiger, am Gerät getesteter CVE-2026-43499-Port für das kanadische Galaxy A36 5G SM-A366W auf exakter Firmware A366WVLS3AYG1, einschließlich KernelSU-Late-Load- und Root-My-Galaxy-Integration. Dieses Repository enthält die gerätespezifische native Seite von Root My...

picohaxx

sorgente in arrivo™ picohaxx Exploit open source del kernel per dispositivi Pico 4 basato su cve-2023-33107 root@kitploit: Usage: picohaxx options -- GENERAL OPTIONS: -help Show this help menu -v Print build timestamp and exit -unroot unroot adbd -nobash once adb root is unlocked, the default is ...

HVCIPwned

CVE-2024-35250 تصعيد صلاحيات محلي عبر إلغاء مرجع مؤشر غير موثوق في برنامج تشغيل Kernel Streaming الخاص بنظام Windows ks.sys. استغلال يعتمد على البيانات فقط — يتجاوز حماية تكامل الكود المحمية بواسطة Hypervisor HVCI. الملخص الحقل| التفاصيل ---|--- CVE| CVE-2024-35250 المكوّن| ks.sys Kernel Streamin...

CVE-2026-78169

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...