PT-2026-81727

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-81728

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:59152)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

AlmaLinux 8 : python-urwid (ALSA-2026:58562)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58562 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

MiracleLinux 8 : python-urwid-1.3.1-5.el8_10 (AXSA:2026-1644:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1644:01 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:59133)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59133 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

RHEL 9 : python-urwid (RHSA-2026:58953)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58953 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

PT-2026-81276

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Allowlisted pickle loaders trust entire module namespaces instead of specific safe callables. This allows attackers to craft malicious pickle payloads that use the pickle REDUCE mechanism to invoke...

RHEL 8 : python-urwid (RHSA-2026:59198)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:59198 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:59133)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59133 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution...

check-react-rce-cve-2025-55182

React RCE Sicherheitslücken-Scanner CVE-2025-55182 Ein umfassendes Sicherheits-Scan-Tool zur Erkennung von CVE-2025-55182 und CVE-2025-66478 Sicherheitslücken in React- und Next.js-Projekten, die React Server Components RSC verwenden. 🚨 Übersicht Dieses Tool scannt Ihr Projekt nach anfälligen...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument-Injektion in PHP-CGI Übersicht Dieses Repository enthält Skripte, um die Schwachstelle CVE-2024-4577 zu prüfen, eine Argument-Injektionsschwachstelle in PHP-CGI. Du kannst die bereitgestellten Bash-, Go- und Python-Skripte verwenden, um eine Liste von Domänen a...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX CVE-2013-225 S2-016 के लिए Struts 2 DefaultActionMapper इंटरैक्टिव शेल शोषण Struts 2 DefaultActionMapper पैरामीटरों को "action:" या "redirect:" के साथ उपसर्ग करके शॉर्ट-सर्किट नेविगेशन स्थिति परिवर्तनों का समर्थन करता है, जिसके बाद एक...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Esecuzione Remota di Codice Autenticato 🚨 Informazioni sull'Exploit Questo è un exploit Esecuzione Remota di Codice RCE autenticato basato su Bash per Tiny File Manager versioni = 2.4.6, vulnerabile sotto CVE-2021-40964. Lo script sfrutta: Validazione debole del...

CVE-2025-3248

CVE-2025-3248 Esecuzione di codice remoto utilizzando un endpoint API vulnerabile — Proof of Concept. Info: ⚠️ Usalo a tuo rischio! ❓ Aggiunta opzione per reverse shell. ✅ Nuovo tentativo automatico se validatecode è disattivato. Dimostrazione Utilizzo root@kitploit: python CVE-2025-3248.py /...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock-Exploit-Skript 🎯💻🔍 Dieses Python-Skript nutzt die Shellshock-Schwachstelle CVE-2014-6271 aus, um Befehle remote auszuführen oder eine Reverse-Shell auf einem verwundbaren Ziel einzurichten. 🛠️⚠️ ⚠ Haftungsausschluss 🚨❗ Dieses Skript ist ausschließlich für...

CVE-2025-4389

CVE-2025-4389 Exploit Dettagli Pubblicato : 16 maggio 2025 Aggiornato : 17 maggio 2025 Gravità : Critico Punteggio CVSS: 9.8 CWE : CWE-434: CWE-434 Caricamento senza restrizioni di file con tipo pericoloso Versioni interessate : Tutte le versioni dalla n/a fino alla 2.6.8.1 Ricercatore :...

CVE-2017-5638-POC

CVE-2017-5638-POC Configurazione del server vulnerabile e proof of concept di CVE-2017-5638 vulnerabilità di esecuzione remota di codice in un componente Apache Server Il server vulnerabile viene eseguito in un container docker, l'immagine può essere creata usando il Dockerfile, eseguendo questo...

jboss-deserialization

JBoss Unsichere Deserialisierung zu RCE über CVE-2017-12149. JBoss Unsichere Deserialisierung - RCE-Ausnutzungslabor. Die Idee hier ist, ein Labor mit einer alten JBoss-Version 7.0 einzurichten, um die Schwachstelle auszunutzen. Wir können Docker verwenden, um den gesamten Prozess zu erleichtern...

CVE-2022-26134

CVE-2022-26134 - Vulnerabilidade de injeção OGNL. Script de prova de conceito que explora a vulnerabilidade de execução remota de código que afeta os produtos Atlassian Confluence 7.18 e inferiores. A vulnerabilidade de injeção OGNL permite que um usuário não autenticado execute código arbitrário...