FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

CVE-2025-55182-NextJS-RCE-PoC

Ambiente de Reprodução do CVE-2025-55182 React2Shell ⚠️ APENAS PARA FINS EDUCACIONAIS Este repositório foi criado estritamente para fins educacionais e de pesquisa. Ele demonstra uma vulnerabilidade crítica nos Componentes de Servidor do React Next.js para ajudar desenvolvedores a compreender os...

litellm-command-injection-security-assessment

CVE-2026-42271 - Injeção de Comandos RCE no LiteLLM AI Gateway MCP Relatório de Cibersegurança em Estilo Consultivo Relatório profissional de avaliação de vulnerabilidades sobre o risco de injeção de comandos no LiteLLM, incluindo resumo executivo, impacto técnico, remediação e estratégia de...

document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF RCE über klickbare Links Cybersicherheitsbericht im Beraterstil Professioneller Schwachstellenbewertungsbericht zum Risiko der Linkbehandlung in Dokumentbetrachtern, einschließlich Auswirkungsanalyse, Behebung und Strategie zur Risikominderung. 📍...

AEMPWN

AEMPWN AEM Forms Scanner per CVE-2025-54253 e CVE-2025-54254 AEMPWN è uno scanner mirato per identificare vulnerabilità ad alto rischio di Adobe Experience Manager AEM Forms, con supporto per rilevamento sicuro, conferma out-of-band OOB cieca e flussi di lavoro di validazione proof-of-concept PoC...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Vollständiger Penetrationstest-Walkthrough und Writeup für die Maschine Codify auf Hack The Box. 📌 Maschineninfo Feld| Wert ---|--- Name| Codify Betriebssystem| Linux Schwierigkeitsgrad| Einfach Kernkonzepte| vm2 RCE CVE-2023-30547, SQLite-DB-Enumeration,...

WG-CVE-2026-1555-Linux

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...

wordpress-rce-vapt-cve-2020-25213

Sfruttamento e Mitigazione RCE di WordPress CVE-2020-25213 📌 Panoramica del Progetto Questo progetto è stato sviluppato nell'ambito del modulo IE4012 – Offensive Hacking Tactics & Strategies. Dimostra l'intero ciclo di vita di un attacco informatico in un ambiente di laboratorio controllato, tra...

CVE-2026-55200

CVE-2026-55200 - Vulnerabilità critica di esecuzione di codice remoto in libssh2 Vulnerabilità critica di corruzione della memoria pre-autenticazione in libssh2 Panoramica...

mi-laboratorio-log4shell

🚀 Automatisiertes Log4Shell- CVE-2021-44228 Plug-and-Play-Labor Ein automatisiertes Sicherheitsforschungslabor mit einem einzigen Befehl, das dazu dient, die Log4Shell- CVE-2021-44228 Remote-Code-Execution-Schwachstelle RCE zu demonstrieren und zu auditieren. Dieses Projekt bündelt alle...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Ricerca sullo Sfruttamento Riproduzione controllata di CVE-2017-0144 — la vulnerabilità SMB dietro l'epidemia del ransomware WannaCry ⚠️ Disclaimer: Questa ricerca è stata condotta in un ambiente di laboratorio completamente isolato e controllato, esclusivamente per scopi...

wongpress

Exploração Real de Vulnerabilidades de Buffer Overflow e Format String para Obter RCE em Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidade de buffer overflow na função iconv do Glibc CVE-2024-29510 : Vulnerabilidade de format string no Ghostscript interpretador da linguagem...

cve-2025-66478_rce_vulnerable

Blog Moderno com shadcn/ui Um blog moderno e elegante construído com Next.js 16, React 19, shadcn/ui e Tailwind CSS. IMPORTANTE: Projeto de Next JS VULNERÁVEL criado apenas para fins educativos, de testes e exploração, NÃO SE RECOMENDA INSTALAÇÃO EM PRODUÇÃO, APENAS PARA ÂMBITO LOCAL OU AMBIENTE...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

react-vuln-scanner

Scanner per la vulnerabilità React CVE-2025-55182 Uno script bash per scansionare il tuo server alla ricerca di applicazioni React vulnerabili a CVE-2025-55182 — una vulnerabilità critica di esecuzione remota di codice CVSS 10.0 in React Server Components. ⚠️ Sulla vulnerabilità Il 3 dicembre 2025...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...