68018 matches found
wp-CVE-2017-5487-exploit
WordPress CVE-2017-5487 Exploit en Python Exemples d'utilisation : python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...
CVE-2019-7069-POC
Kibana ⚠️ अस्वीकरण: यह स्क्रिप्ट केवल शैक्षिक और अधिकृत पेनिट्रेशन टेस्टिंग के लिए है। इसे उन सिस्टम पर उपयोग न करें जिनके आप मालिक नहीं हैं या जिनके परीक्षण की आपको स्पष्ट अनुमति नहीं है। लेखक और योगदानकर्ता इस उपकरण के किसी भी दुरुपयोग या क्षति के लिए जिम्मेदार नहीं हैं। 🎯 यह क्या है? यह एक...
CVE-2026-107204
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...
EUVD-2026-94447
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
CVE-2026-20032
A vulnerability in the Python interpreter of Cisco NX-OS Software allows an authenticated, local attacker with low privileges to escape the Python sandbox . The root cause is insufficient validation of user-supplied input , which can be exploited by manipulating specific functions within the inte...
CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
Cisco NX-OS Software Python Sandbox Escape Vulnerability
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
CVE-2015-1635_PoC
الاستخدام: python3 CVE-2015-1635PoC.py مثال: python3 CVE-2015-1635PoC.py http://www.xxx.com...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
CVE-2026-107204
LMCache versions through 0.5.5 are vulnerable to an unauthenticated remote code execution (RCE) vulnerability via the /run_script endpoint. The root cause is that attackers can post scripts to this endpoint and recover real builtins through the injected FastAPI app object , which allows them to b...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
EUVD-2026-94383
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
EUVD-2026-94371
Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdownextensions configuration. An authenticated attacker who can register or influence an SCM-backed documentation...
CVE-2025-24893_Shell
2025-24893Shell المتطلبات: httpx الاستخدام: python exploit.py victim.com...
Drupal_REST-RCE_Unauthenticated
CVE-2019-6340 — استغلال تنفيذ الأوامر عن بُعد في خدمات ويب RESTful في دروبال تطبيق بلغة بايثون لاستغلال تنفيذ الأوامر عن بُعد للثغرة CVE-2019-6340، استنادًا إلى تحليل وحدة Metasploit والأعمال السابقة لـ leonjza. الفرق الرئيسي عن EDB-46459: يستخدم POST بدلاً من GET، متجاوزًا ذاكرة التخزين المؤقت...
CVE-2021-40438-POC
ملاحظة: مخصصة للأغراض التعليمية واختبارات التحكم فقط. اختبر فقط على الأنظمة التي لديك الإذن بتقييمها. CVE-2021-40438 - استغلال SSRF ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...
regipy
regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...