EUVD-2026-64921

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

EUVD-2026-64920

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416 Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416

Craft CMS versions 4.0.0-RC1 through 4.18.1 and 5.0.0-RC1 through 5.10.5 are affected by an authenticated remote code execution vulnerability in the control panel element-search condition handling. The root cause is a JSON cleanse bypass in condition.config that allows Yii behavior/event configur...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC per TP-Link Archer C9 - Reset della password amministratore e RCE CVE-2017-11519 Vedi il writeup su https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2025-5394

🚨 CVE-2025-5394 - Upload Arbitrario di Plugin senza Autenticazione nel Tema Alone 📌 Prodotto interessato: Alone – Tema WordPress Multipurpose Non-profit per Beneficenza Versioni: = 7.8.3 CVE: CVE-2025-5394 Punteggio CVSS: 9.8 Critico 🔥 Riepilogo della vulnerabilità: Il tema Alone per WordPress è...

http-vuln-CVE-2022-41082

LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

EUVD-2026-64918

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2026-71364 Awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2018-6961

Exploit CVE-2018-6961 in Python3 VMware NSX SD-WAN Edge di VeloCloud precedente alla versione 3.1.0 contiene una vulnerabilità di command injection nel componente locale dell'interfaccia web. Questo componente è disabilitato per impostazione predefinita e non dovrebbe essere abilitato su reti non...

CVE-2016-10033

CVE-2016-10033 Questa vulnerabilità colpisce PHPMailer 5.2.18 ed è in grado di ottenere l'esecuzione di codice remoto. Risorse https://vulners.com/cve/CVE-2016-10033 Utilizzo Essendo scritto in Golang, puoi compilare l'exploit da solo, purché Golang sia installato nel tuo sistema con:...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit para CVE-2017-14980 — uma vulnerabilidade de stack-based buffer overflow no Sync Breeze Enterprise 10.0.28. 📖 Análise técnica completa do exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ Sobre Este repositório contém um proof-of-concept PoC...

n8n-RCE

n8n RCE CORRETTO Esecuzione di codice da remoto tramite flussi di lavoro n8n Basato su CVE-2025-68613 ⚠️ Realizzato solo a scopo educativo 📚 Installazione e Utilizzo 🛠️ root@kitploit: $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python...

BIT-EternalBlue-for-macOS_Linux

BIT-EternalBlue-for-macOS&Linux Exploit di CVE-2017-7494 per l'assegnazione finale del corso di Net Security. Questo esperimento mette in luce la vulnerabilità dei servizi che vengono eseguiti con privilegi amministrativi sul sistema operativo. Questo bug funziona sia su macOS che su Linux...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Überblick Dieses Exploit-Tool zielt auf Path-Traversal- und Remote-Code-Execution-Schwachstellen in Apache HTTP Server Versionen 2.4.49 und 2.4.50 ab. Das Tool verwendet das curl-Backend, um URL-Codierungsprobleme zu umgehen, die andere Python-basierte Exploit-Versuche beeinträchtigen, und biet...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – RCE zero-click in AudioConverterService su iOS Divulgazione pubblica di CVE-2025-31200 – una vulnerabilità di esecuzione remota di codice RCE zero-click in iOS 18.X di Apple, in particolare nel componente AudioConverterService. La vulnerabilità viene attivata da un file audio...

Penetration-Testing-Assessment-23-04-2026

Penetrationstest-Bericht – IIS WebDAV Ausnutzung Übersicht Dieses Projekt demonstriert einen vollständigen Penetrationstest-Lebenszyklus, der auf einem anfälligen Zielsystem durchgeführt wurde. Die Bewertung folgt einem strukturierten Ansatz, der Aufklärung, Scannen, Enumeration, Ausnutzung und...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB Questo repository contiene un file di informazioni cristallografiche CIF destinato all'uso sulla macchina "Chemistry" su Hack The Box HTB. Esempio di file CIF root@kitploit: dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha...