ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-0282-Full-version

Storks: Tool zur Ausnutzung von Remote Code Execution-Schwachstellen Überblick Storks ist ein Python-basiertes Proof-of-Concept PoC-Tool, das eine kritische Remote Code Execution RCE-Schwachstelle demonstriert, identifiziert als CVE-2025-0282 , in einem bestimmten Netzwerkgerät. Diese Schwachstel...

TryHack3M-Bricks-Heist

target:10.201.6.98 Enumeration root@kitploit: nmap -A 10.201.6.98 Da es ein WordPress mit dem Namen „brick by brick“ gibt und der Name dieses Raums „brick“ ist, befindet sich dort wahrscheinlich eine Schwachstelle. Also lasst uns WordPress enumerieren. root@kitploit: wpscan --url https://bricks.t...

mcpjam-to-root

⚠️ Avvertenza Questo repository è destinato esclusivamente a ricerca sulla sicurezza autorizzata, test di penetrazione e scopi didattici. Non utilizzare le tecniche qui descritte contro sistemi senza autorizzazione esplicita. ⚡ MCPJam → Root Dalla RCE di MCPJam Inspector a root — CVE-2026-23744,...

awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-76070

CVE-2026-76070: Netis NC63 login.cgi में बेस64-डिकोडेड पासवर्ड के माध्यम से बिना प्रमाणीकरण प्री-ऑथ स्टैक बफर ओवरफ्लो, जो RCE की ओर ले जाता है शोधकर्ता: Özcan Ersan @ozcanpng प्रकटीकरण स्थिति CVE: CVE-2026-76070 विक्रेता: Netis Systems Co., Ltd. उत्पाद: Netis NC63 Wireless AC1200 Router परीक्षित...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerabile a Stored DOM XSS tramite prompt quando 'Insert Prompt as Rich Text' è abilitato, con conseguente ATO/RCE Riepilogo La funzionalità che inserisce prompt personalizzati nella finestra di chat è vulnerabile a DOM XSS quando 'Insert Prompt as Rich Text' è...

cve-2026-63030-lab

CVE-2026-63030 — Laboratorio wp2shell RCE pre-autenticazione nel core di WordPress tramite REST API Batch Route Confusion + SQL Injection...

CVE-2023-3452---WordPress-Canto-Plugin-RCE

CVE-2023-3452 - WordPress Canto Plugin RCE Exploit für das WordPress Canto Plugin ≤ 3.0.4 RFI-Schwachstelle. Funktioniert tatsächlich mit HTTPS — die anderen öffentlichen PoCs haben bei SSL aufgegeben. Anerkennung wo sie gebührt: Dieses CVE wurde von anderen gefunden. Ich habe nur eine Version...

SAP-CVE-2025-31324

SAP-CVE-2025-31324 POC Uno strumento per rilevare e sfruttare una vulnerabilità critica di upload di file non autenticato in SAP NetWeaver Visual Composer. Descrizione SAP NetWeaver Visual Composer include un componente chiamato Metadata Uploader che non dispone di adeguati controlli di...

CVE-2024-25082_CVE-2024-25081

⚠️ FontForge RCE — CVE-2024-25081 & CVE-2024-25082 - PoC 📖 Überblick Proof-of-concept-Exploit für zwei Befehlseinschleusungssicherheitslücken in FontForge ≤ 20230101 Splinefont Komponente...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

cve-2023-36845-scanner

Scanner di vulnerabilità per Juniper CVE-2023-36845 Questo scanner di vulnerabilità può essere utilizzato per scansionare i firewall Juniper per determinare se sono vulnerabili a CVE-2023-36845. Poiché è costruito su go-exploit, questo scanner ha due fasi: Verifica del target per assicurarsi che ...

CVE-2024-30270-PoC

यह स्क्रिप्ट Cross-Site Scripting XSS और Remote Code Execution RCE का उपयोग करके Mailcow इंस्टेंस में कमजोरियों का शोषण करने के लिए डिज़ाइन की गई है। स्क्रिप्ट का उद्देश्य है: Mailcow वेब इंटरफ़ेस में XSS पेलोड इंजेक्ट करना। अनधिकृत कार्रवाइयाँ करने के लिए XSS पेलोड का उपयोग करना। सर्वर टेम्पलेट ...