selenium-node-takeover-kit

Exploit Metasploit Questo progetto è stato spostato. Per ottenere l'ultima versione, esegui il pull da https://codeberg.org/JonStratton/selenium-node-takeover-kit Questo combina alcuni degli esempi seguenti per caricare file su, scaricare file da, ed eseguire codice su un nodo Selenium tramite il...

CVE-2018-7600

ठीक है देव, मैंने git clone से शुरू होने वाला उपयोग वाला हिस्सा भी जोड़ दिया है, इसलिए README पूरा हो गया है। यह अंतिम संस्करण है जिसे आपको अपने GitHub repo में README.md में कॉपी-पेस्ट करना है। CVE-2018-7600 - Drupalgeddon2 RCE Exploit यह Exploit Drupal 7.56 और कुछ पिछले संस्करणों की उस कमजोरी क...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python-Exploit CVE-2018-7600 Dieses Repository enthält einen Python-basierten Proof-of-Concept-Exploit für die kritische Remote-Codeausführungsschwachstelle in Drupal, bekannt als Drupalgeddon2 CVE-2018-7600. Dieses Skript ist für Bildungszwecke und für Sicherheitsexperten zur...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Xdebug ≤ 2.5.5 CVE-2015-10141 के लिए कस्टम Python एक्सप्लॉइट। विवरण इस रिपॉजिटरी में 2.5.5 और उससे पुराने संस्करणों में Xdebug रिमोट कोड निष्पादन भेद्यता के लिए मेरा प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट मौजूद है। स्क्रिप्ट पोर्ट 9000 पर उजागर अनप्रमाणित डिबगिंग प्रोटोकॉल का लाभ...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Nicht authentifizierte beliebige Dateierstellung Beschreibung: Das Debug Tool Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung in der Funktion dbtpullimage und einer fehlenden Dateityp-Validieru...

CVE-2025-32579

⚠️ CVE-2025-32579 - RCE Critica tramite il Plugin Sync Posts WordPress 📦 Interessa: Sync Posts 🧨 Punteggio CVSS: 9.9 CRITICA 📁 Vettore CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 Panoramica della Vulnerabilità Il plugin WordPress Sync Posts di SoftClever Limited è vulnerabile a una...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 Proof-of-Concept Go Version Übersicht Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2021-25646, eine kritische Remote-Code-Ausführungssicherheitslücke in Apache Druid. Der Exploit ist in Go geschrieben und ermöglicht interaktive Befehlseinschleusung über das...

CVE-2022-35914_poc

CVE-2022-35914poc Modificato per GLPI Offsec Lab: calluserfunc, arraymap, passthru Riferimenti Modificato per funzionare per il Proving Grounds Practice Lab: GLPI https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr...

Telerik-UI-ASP.NET-AJAX-Exploitation

Telerik-UI-ASP.NET-AJAX-Exploitation Caricamento file senza restrizioni tramite crittografia debole nelle versioni interessate CVE-2017-11317 2. Esecuzione remota di codice tramite deserializzazione non sicura - CVE-2019-18935...

Zoom-dll-hijacking

Zoom-dll-hijacking Una vulnerabilità di DLL hijacking in Zoom Meeting 5.1.3 Versioni di Windows interessate Windows 7 o precedenti Windows Server 2008 Qualsiasi altro sistema Windows che non ha SHCore.dll presente. Utilizzo Copia dbghelper.dll e SHCore.dll nella seguente posizione...

Scanners-for-CVE-2020-0796-Testing

Scanners-for-CVE-2020-0796-Testing Elenco degli scanner - Vulnerabilità di esecuzione di codice remoto in Microsoft Windows SMBv3 CVE-2020-0796 Vulnerabilità di esecuzione di codice remoto in Microsoft Windows SMBv3 CVE-2020-0796 Elenco Scanner Esiste una vulnerabilità critica di esecuzione di...

cve-2019-16278

cve-2019-16278 Nhttpd Nostromo 1.9.6 RCE aufgrund von Directory Traversal root@kitploit: git clone https://github.com/Kr0ff/cve-2019-16278...

cve-2021-26084-confluence

Dies ist ein schneller und schmutziger poc, der für eine bestimmte Confluence-Instanz optimiert wurde, da keiner der vorhandenen handelsüblichen pocs funktioniert hat. Offensichtlich basiert es fast vollständig auf der Arbeit von https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md un...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Caricamento Arbitrario di File non Autenticato tramite restupload Descrizione: Il plugin AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! per WordPress è vulnerabile a caricamenti arbitrari di file a causa della mancanza di...

CVE-2022-0543

CVE-2022-0543 Exploit completo per RCE su Redis tramite la vulnerabilità di fuga dalla sandbox Lua. Basato su https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Caratteristiche: Reverse shell automatica -I + -P Esecuzione di un singolo comando...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress Reflected XSS pre-autenticazione → Catena di Remote Code Execution DOM Clobbering + furto di Application Password + attivazione plugin REST API = RCE completo ⚡ Panoramica CVE-2026-64638 è una Reflected XSS pre-autenticazione critica in WordPress wp-login.php...

CVE-2026-10053

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

CVE-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

CVE-2026-10053

GitLab CE/EE is affected by a path traversal vulnerability in the package registry component that could allow an authenticated user (low privileges) to achieve remote code execution . The vulnerability affects versions 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2. The CVSS 3.1 s...

EUVD-2026-64645

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...