Mintinstall-object-injection

TR El administrador de software de Linux Mint v 7.9.5/9 provoca la inyección de objetos y la ejecución de código arbitrario debido a una configuración incorrecta. EN El administrador de software de Linux Mint v 7.9.5/9 nos hace ejecutar inyección de objetos y código arbitrario debido a una...

CVE-2022-30525

CVE-2022-30525 Zyxel 防火墙命令注入漏洞 CVE-2022-30525 POC&EXP author:160team.west9B 仅限用于安全研究人员在授权的情况下使用，遵守网络安全法，产生任何问题，后果自负，与作者无关。 01-基本介绍 2022 年 5 月 12 日，Zyxel（合勤）发布安全公告，修复了其防火墙设备中未经身份验证的远程命令注入漏洞（CVE-2022-30525），该漏洞的CVSS评分为9.8。该漏洞存在于某些Zyxel防火墙版本的 CGI 程序中，允许在未经身份验证的情况下在受影响设备上执行任意命令。 影响范围: ATP系列固件：5.10-5....

jscythe

jscythe 滥用 Node.js 的检查器机制，以强制任何基于 Node.js/Electron/v8 的进程执行任意 JavaScript 代码，即使其调试功能已被禁用。 已在 Visual Studio Code、Discord、任何 Node.js 应用程序等环境中测试并运行！ 使用方法 1. 定位目标进程。 2. 向进程发送 SIGUSR1 信号，这将在某个端口上启用调试器（具体端口取决于软件，有时是随机的，有时是固定的）。 3. 通过对比发送 SIGUSR1 前后的开放端口差异，确定调试端口。 4. 从 http://localhost:/json 获取 WebSocket...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

cve-2025-2082-POV

CVE-2025-2082 – Sobrescritura de Puntero de Función PoV estilo VCSEC Este repositorio demuestra una Prueba de Vulnerabilidad PoV que simula una falla crítica de corrupción de memoria inspirada en CVE-2025-2082, descubierta en el componente VCSEC Seguridad del Controlador del Vehículo de Tesla. La...

cve-2021-25646

Apache Druid 远程代码执行 漏洞概要 Apache Druid 官方发布安全更新，通报了一个远程代码执行漏洞，漏洞编号 CVE-2021-25646。由于 Apache Druid 默认情况下缺乏授权认证，攻击者可以发 送特制请求，利用 Druid 服务器上进程的特权执行任意代码。 Apache Druid 是用 Java 编写的面向列的开源分布式数据存储，旨在快速获 取大量事件数据，并在数据之上提供低延迟查询。Druid 旨在快速提取大量事件 数据，并在数据之上提供低延迟查询。Druid 通常用于商业智能/ OLAP 应用程序 中，以分析大量的实时和历史数据。 脚本使用...

CVE-2020-12124

Anatomía de un Exploit de IoT, del Práctico al RCE originalmente en https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce por David E. Baker, publicado el 1 de junio de 2023 Prefacio Este estudio trata sobre el firmware del router Gigabit inalámbrico...

cve-2023-22527

Ejecución de Código Arbitrario en la Memoria de Confluence CVE-2023-22527 es una vulnerabilidad ampliamente conocida que afecta a Atlassian Confluence. La mayoría de los exploits para esta vulnerabilidad utilizan freemarker.template.utility.Execute para ejecutar un comando del sistema operativo,...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-35585 , a critical OS Command Injection vulnerability discovered in File Browser versions 2.0.0 through 2.33.1. The vulnerability exists in the "Custom Command Hooks"...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 中 Action Pack 在 3.2.22.2 之前、4.x 在 4.1.14.2 之前以及 4.2.x 在 4.2.5.2 之前的版本中，允许远程攻击者通过利用应用程序对 render 方法的无限制使用来执行任意 Ruby 代码。 资源 https://vulners.com/cve/CVE-2016-2098 使用方法 要使用此漏洞利用脚本，您需要三个参数。 1. 目标 Web 服务器的网页 URL。 2. 可能注入命令的易受攻击参数。 3. 要在远程服务器上执行的 shell 命令。...

CVE-2020-7961-payloads

CVE-2020-7961-payloads Deserialización de datos no confiables en Liferay Portal anterior a 7.2.1 CE GA2 permite a atacantes remotos ejecutar código arbitrario a través de servicios web JSON JSONWS Paso 1 Escribe tu payload en LifExp.java Paso 2 Compílalo con javac Paso 3 Configura tu servidor de...

WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code Execution

An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files installer.php and installer-backup.php, an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution. id: CVE-2018-17207 info: name:...

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

vBulletin replaceAdTemplate - Remote Code Execution

vBulletin versions 5.0.0 through 6.0.3 contain a Remote Code Execution RCE vulnerability in the ajax/api/ad/replaceAdTemplate endpoint. This flaw arises from improper use of PHP's Reflection API, allowing unauthenticated attackers to invoke protected controller methods. By injecting a crafted...

SPIP Porte Plume Plugin - Remote Code Execution

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. id: CVE-2024-7954 info: name: SPIP Porte Plume...

Roxy-WI < 6.1.1.0 - Remote Code Execution

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the subprocessexecute function without processing the inputs received from the user in the /app/options.py file. id: CVE-2022-31137 info: name: Roxy-WI 6.1.1.0 - Remote Code Execution author:...

CVE-2024-3660-PoC

CVE-2024-3660 – Ejecución de código arbitrario en TensorFlow Keras mediante modelo malicioso Resumen CVE-2024-3660 es una vulnerabilidad de ejecución de código arbitrario en el framework Keras de TensorFlow que afecta a las versiones \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker crea...

CVE-2022-24818

CVE-2022-24818: Deserialización de Java mediante búsquedas JNDI no verificadas en GeoServer y GeoTools La biblioteca GeoTools tiene una serie de fuentes de datos que pueden realizar búsquedas JNDI no verificadas, que a su vez pueden utilizarse para llevar a cabo la deserialización de clases y...