CVE-2023-38831-Exploit

CVE-2023-38831 WinRAR 漏洞利用生成器 作者：technicalcorp 此项目包含一个 Python 脚本，该脚本利用了 CVE-2023-38831 ，这是 WinRAR 6.23 之前版本中的一个漏洞。该漏洞利用程序会生成一个恶意 RAR 压缩包 ，当受害者打开压缩包中的看似无害的文件（例如 PDF）时，会触发任意代码的执行。该漏洞在 2023 年 4 月至 8 月期间被野外积极利用。 漏洞概述 CVE-2023-38831 是 WinRAR 中的一个漏洞，当受害者打开一个同时包含良性文件 和同名恶意文件夹...

CVE-2025-55182-realistic-poc

CVE-2025-55182：React 服务端组件 RCE 一个最小的概念验证，展示了 [email protected] 中的严重远程代码执行漏洞。 什么是 CVE-2025-55182？ 一个预认证的 RCE 漏洞，存在于 React 服务端组件中，攻击者可以在使用易受攻击的 react-server-dom-webpack 包（版本 19.0.0 - 19.2.0）的服务器上执行任意代码。 CVSS 评分： 10（严重） 受影响包 react-server-dom-webpack 19.0.0, 19.1.0, 19.1.1, 19.2.0...

CVE-2026-84070

IBM Guardium Data Protection 12.2 is vulnerable to arbitrary code execution caused by improper neutralization of input during web page generation. A remote authenticated attacker with low privileges and required user interaction can exploit this flaw, resulting in high impact on confidentiality a...

CVE-2026-81657 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Prueba de concepto para investigar CVE-2025-59528 en un entorno de laboratorio aislado. !WARNING DESCARGO DE RESPONSABILIDAD Este proyecto está destinado estrictamente a fines educativos, investigación de seguridad y pruebas de sistemas que usted posee o para los que cuenta con...

EUVD-2026-83202

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model wit...

VertXploit

VertXploit 利用 HID VertX 和 EDGE 门禁控制系统 摘要 VertXploit 是一款可用于利用 HID VertX 和 EDGE 门禁控制系统的工具。 discoveryd 服务中存在一个漏洞，该服务在执行系统调用前未能对用户数据进行过滤。这允许在无需身份验证的情况下，在 HID VertX 和 EDGE 门禁控制系统上执行任意代码。有关更多信息，请参阅命令注入部分。 VertXploit 可以解锁或锁定连接到门禁控制系统的门，下载包含所有已配置/缓存门禁卡信息的数据库，并且如果 VertX 系统存在漏洞，还可以以 root 身份执行任意命令。 如果 VertX...

CVE-2026-81305

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...

CVE-2026-7006

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

CVE-2026-10747

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

CVE-2026-10747 IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

CVE-2026-81945 PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...

EUVD-2026-82989

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-92125

A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can exploit this vulnerability. By not properly rejecting the @GroovyASTTransformationClass annotation, an attacker can run an arbitrary Abstract Syntax Tree...

MAGNOLIA-8348

MAGNOLIA-8348：Magnolia CMS 中的 FreeMarker 限制绕过 3 Magnolia CMS v6.2.17 及更低版本的 FreeMarker Filter 存在一个问题，允许攻击者通过精心构造的 FreeMarker 载荷绕过安全限制并执行任意代码、读取/写入/移动/复制/删除任意文件或发起 DoS 攻击。通过写入任意 JSP 文件，已成功实现任意代码执行。 协作： 此漏洞是与 Marian-Razvan Ilisanu 合作发现的。 厂商披露： 此漏洞的厂商披露与修复方案可在此处查看。 为何没有 CVE？ 我和厂商均未为这些漏洞申请 CVE。 概念验证：...

MAGNOLIA-8281

MAGNOLIA-8281：Magnolia CMS 中的 FreeMarker 限制绕过 2 Magnolia CMS v6.2.16 及以下版本的 FreeMarker 过滤器存在一个安全问题，攻击者可借由精心构造的 FreeMarker 载荷绕过安全限制，读取/写入/移动/复制/删除任意文件。通过写入任意 JSP 文件，已成功实现任意代码执行。 厂商披露： 该漏洞的厂商披露与修复方案可以在此处查看。 为什么没有 CVE？ 我和厂商均未为这些漏洞申请 CVE。 概念验证： 更多详情及利用过程可参见此 PDF。 其他资源： 用于执行任意系统命令的 JSP 代码可在此处找到...

jvmtiAgentLoad-Exploit

通过 jvmtiAgentLoad 实现任意代码执行 描述： 用于生成恶意 JAR 以利用 jvmtiAgentLoad 的工具和代码。 用法： root@kitploit: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux 目标 以下命令会生成一个可用于 Linux 目标的 JAR（mal.jar）： root@kitploit: bash createjar.sh linux 'id /tmp/jvmtiLoadAgenttest' Windows 目标...

CVE-2026-93467

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2026-93467 HGiga｜OAKlouds - Insecure Deserialization

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...