268361 matches found
CVE-2025-63406-PoC
CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Verwendung root@kitploit: python3 CVE-2025-63406.py -u -...
cve-2026-33067
CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei-Vorlage, die CVE-2026-33017 erkennt — eine nicht authentifizierte Remote-Code-Ausführungs-Schwachstelle in Langflow ≤ 1.8.2 , die über den öffentlichen flow-build-Endpunkt erreichbar ist: root@kitploit: POST...
react-rsc-cve-2025-55182-lab
CVE-2025-55182 Lab — React Server Components RCE Pädagogisches Labor, das CVE-2025-55182 demonstriert – eine kritische CVSS 10.0 Remote Code Execution-Sicherheitslücke in React Server Components, verursacht durch Prototyp-Verschmutzung im Flight-Protokoll-Deserialisierer. Haftungsausschluss: Dies...
CVE-2024-37084-Poc
CVE-2024-37084-Poc सेटअप , विश्लेषण , डेमो एक्सप्लॉइट और CVE-2024-37084 के बारे में poc उपयोग कैसे करें : root@kitploit: py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optiona...
K000163051: libssh2 vulnerability CVE-2026-55200
Security Advisory Description libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
React2Shell-Kingdom
Progetto di dimostrazione della vulnerabilità React CVE-2025-55182 ⚠️ AVVISO DI SICUREZZA Questo progetto dimostra una vulnerabilità critica di RCE CVE-2025-55182 / React2Shell in React Server Components 19.1.1. SOLO PER SCOPI EDUCATIVI E DI RICERCA SULLA SICUREZZA NON distribuire MAI in produzion...
CVE-2023-50164-HTB-strutted
CVE-2023-50164: Una vulnerabilità critica di sicurezza, identificata come CVE-2023-50164 CVE: 9.8, è stata trovata in Apache Struts, consentendo agli aggressori di manipolare i parametri di caricamento dei file, cosa che può potenzialmente portare a un path traversal non autorizzato e...
CVE-2024-44902-env
CVE-2024-44902 - ThinkPHP Unsicheres Deserialisieren RCE Verwundbare Umgebung zur Validierung von nuclei-templates. Schwachstellendetails...
CVE-2026-52887-NocoBase-SQLi-RCE
CVE-2026-52887 — Injeção de SQL no NocoBase → RCE como superusuário do PostgreSQL Injeção de SQL na ação myInAppChannels:list do NocoBase @nocobase/plugin-notification-in-app-message ≤ 2.0.60. O parâmetro de requisição filterlatestMsgReceiveTimestamp$lt é interpolado diretamente em uma string SQL...
n8n-cve-2026-21858
n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — exploit n8n da lettura file non autenticata a RCE...
Geutebrueck_GCore_X64_RCE_BO
GeutebrueckGCoreX64RCEBO Modulo Metasploit per il sistema "video management" Geutebrueck GCore. Testato con le versioni 1.3.8.42 e 1.4.2.37. Esecuzione remota completa di codice con privilegi NT/System su Windows Win 2012R2, Win8.1, ... con i prodotti Geutebrueck installati GCore. Autori:...
react-rce
CVE-2025-55182 Laboratório de Vulnerabilidade React2Shell IA utilizada: Claude Opus 4.5 ⚠️ Aviso : Este ambiente deve ser usado apenas para fins educacionais e de pesquisa. Visão Geral da Vulnerabilidade...
dockerevil
dockerevil एक सरल रिपॉजिटरी जो Docker तकनीक में मेरी सुरक्षा खामियों को संग्रहीत करती है 2016 - 2017 Docker API विशेषाधिकार वृद्धिLPE/RPE ऑफ़लाइन सर्वर/न्यूनतम इमेज से विशेषाधिकार वृद्धि/TAR Dockerfile से बिल्ड Docker SUDO विशेषाधिकार वृद्धि PoC Nmap स्क्रिप्ट 2019 CodeStudent1995 आधारित एक्सप्लॉ...
Magneto-PolyShell
Magento 2 RCE Exploit - Unauthentifizierter Datei-Upload zu RCE ⚠️ Dieses Tool dient ausschließlich zu Bildungs- und autorisierten Sicherheitstests. Unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören, ist illegal. Dieses Exploit zielt auf eine kritische Schwachstelle für nicht...
FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow
A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...
CVE-2023-30253-exploit
CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution Exploit di iniezione di codice PHP per Dolibarr ERP/CRM v17.0.0 che permette di ottenere una shell inversa come utente www-data tramite il modulo Website/CMS. ⚠️ Solo per uso educativo e audit autorizzati. 📑 Indice Che cos'è...
ghostlock-vagrant-box
Testumgebung für vollständige Angriffskette: Nginx RCE → GhostLock LPE Übersicht Dieses Repository stellt eine Vagrant-Umgebung bereit, die eine komplette zweistufige Angriffskette demonstriert. Die Testumgebung richtet automatisch eine isolierte Ubuntu 22.04 LTS -VM ein, die absichtlich so...
CVE-2022-26134
Confluence में Pre-Auth Remote Code Execution OGNL Injection के माध्यम से CVE-2022-26134 Ruby में Confluence एक वेब-आधारित कॉर्पोरेट विकी है जिसे ऑस्ट्रेलियाई सॉफ्टवेयर कंपनी Atlassian द्वारा विकसित किया गया है। 2 जून, 2022 को Atlassian ने अपने Confluence Server और Data Center अनुप्रयोगों के लिए ...