CVE-2018-11776

CVE-2018-11776 Proof of Concept per l'exploit, così potevo valutare rapidamente quali tipi di protezioni e fix sono disponibili. Originariamente trovata da Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle aveva per un po' un video YouTube "Apache Struts RCE -...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Nicht authentifizierte Remote-Befehlseinschleusung. Übersicht Dieses Repository enthält ein Proof-of-Concept PoC Reverse-Shell-Skript zur Ausnutzung von CVE-2022-36553, einer kritischen Schwachstelle in Hytec Inter HWL-2511-SS-Geräten. Das Skript ist eine...

CVE-2026-76841

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-59568

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

CVE-2025-31324_PoC

CVE-2025-31324PoC Proof-of-Concept per CVE-2025-31324: caricamento non autenticato in SAP NetWeaver Visual Composer Metadata Uploader Questo script esegue: 1. Caricamento del file sull'endpoint vulnerabile tramite host/porta Upload 2. Attivazione opzionale tramite HTTP GET tramite host/porta...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman Questo repository contiene un exploit PoC per CVE-2020-11896, una critica vulnerabilità di buffer overflow basata su heap nello stack Track TCP/IP parte della suite di vulnerabilità Ripple20. L'exploit consente l'esecuzione...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Apache APISIX Remote Code Execution RCE Questo repository contiene un proof-of-concept PoC per una vulnerabilità in Apache APISIX. La vulnerabilità si presenta quando l'Admin API è abilitata e le regole di restrizione degli IP di accesso vengono eliminate, consentendo al token...

CVE-2022-22909

CVE-2022-22909 Descrizione È stata trovata una vulnerabilità di Code Injection nell'applicazione Hotel Druid v3.0.3, che un attaccante potrebbe sfruttare per eseguire codice remoto sul server. Per uno sfruttamento riuscito, un attaccante deve avere il privilegio di aggiungere una nuova stanza...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-45698

A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without...

CVE-2026-59568

CVE-2026-59568 covers multiple vulnerabilities in Zscaler Client Connector (ZCC) that allow an unauthenticated, unprivileged remote attacker to achieve remote code execution in the ZCC context. The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector, low complexity, no pr...

CVE-2026-59568 Remote Code Execution

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

EUVD-2026-64884

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit Uno strumento di ricerca sulla sicurezza per rilevare e testare la vulnerabilità CVE-2025-63888 in ThinkPHP 5.0.24, che consente l'esecuzione remota di codice tramite attacchi di inclusione di file. ⚠️ Disclaimer Questo strumento è destinat...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Execução Remota de Código RCE Um problema foi identificado nas versões 1.0.0 e 1.1.4 do Telesquare TLR-2005Ksh que pode permitir que atacantes executem comandos arbitrários do sistema explorando o parâmetro Cmd. Essa vulnerabilidade pode potencialmente...

CVE-2025-47812-poC

CVE-2025-47812-poC Wing FTP Server RCE CVE-2025-47812 के लिए सरल शोषण जो कमांड चलाने और रिवर्स शेल प्राप्त करने के लिए है। केवल शैक्षिक उपयोग के लिए। भेद्यता विवरण यह सुरक्षा भेद्यता RCESecurity https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/ द्वारा सार्वजनिक...

Dubbo-deserialization

Apache Dubbo Deserialisierungs-Schwachstellenforschung Dieses Repository enthält Forschungsmaterialien, Proof-of-Concept-Code und Exploitation-Tools im Zusammenhang mit Deserialisierungs-Schwachstellen in Apache Dubbo, mit besonderem Fokus auf CVE-2020-1948. Repository-Struktur Verzeichnisse...

CVE-2015-1578-PoC-Metasploit

Módulo Metasploit para CVE-2015-1578 Visão Geral Este é um módulo do Metasploit para CVE-2015-1578 , uma vulnerabilidade de estouro de buffer em Achat 0.150 beta7 no Windows. A exploração leva à execução remota de código por meio de um pacote UDP malicioso. Objetivo Este módulo foi desenvolvido...

CVE-2022-39073

CVE-2022-39073 फ़र्मवेयर विवरण: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 पूर्वापेक्षाएँ requests pip install requests कमांड इंजेक्शन यह भेद्यता ztenetlinkdetect बाइनरी और वेबसर्वर goahead बाइनरी में WATCHDOGSWITCH हैंडलर के बीच एक साझा कमांड...