PoC-for-CVE-2021-38540-

CVE-2021-38540 Prova di concetto Autenticazione mancante su un componente critico noto come CVE-2021-38540 Informazioni su questo bug: L'endpoint di importazione delle variabili non era protetto da autenticazione in Airflow =2.0.0, =2.0.0, variables List Variables Sorgente della PoC: root@kitploi...

CVE-2026-71905

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

CVE-2025-24813-PoC

CVE-2025-24813 – Prova di Concetto 📖 Panoramica Questo repository contiene una Prova di Concetto PoC per la CVE-2025-24813 , una vulnerabilità che colpisce nome del software/prodotto interessato qui – aggiornare in base all'avviso. La PoC dimostra il problema in modo sicuro e riproducibile , per...

cve-2020-0796

Identifizieren und Eindämmen des CVE-2020-0796-Fehlers im Handumdrehen CVE-2020-0796 ist eine Pre-Remote-Code-Ausführungssicherheitslücke, die im Netzwerkkommunikationsprotokoll Server Message Block 3.0 SMBv3 liegt und welche Microsoft nicht als Teil des März 2020 Patch Tuesday beheben wird...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ Was ist CVE-2025-1974? CVE-2025-1974 IngressNightmare ist eine kritische CVSS 9.8 ohne Authentifizierung ausnutzbare Remote-Code-Ausführungs-Schwachstelle im Kubernetes ingress-nginx Admission Controller. Angriffsablauf: 1. Upload : Senden einer schädlichen Share...

CVE-2025-6058

🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 बिना प्रमाणीकरण के फ़ाइल अपलोड शोषण WordPress WPBookit प्लगइन ≤ 1.0.4 को लक्षित करने वाला बिना प्रमाणीकरण का मनमाना फ़ाइल अपलोड शोषण यह शोषण रिमोट शेल अपलोड और पूर्ण कमांड निष्पादन की अनुमति देता है। लेखक: 0xgh057r3c0n 📌 भेद्यता के बारे में CVE-2025-60...

CVE-2026-76836

AzuraCast (through 0.23.8 ) allows a station manager holding only the Profile permission to write Liquidsoap custom configuration fields via PUT /api/station/{station_id}/profile/edit. The root cause is that the backend_config property is serialized under GROUP_GENERAL without field-level permiss...

rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow-in-chrome-on-android

CVE-2026-76036 — Dawn WebGPU Erkennungs-Harness für NPOT-Tiefen-/Stencil-Mipmaps Kritischer CVSS 9.6, CWE-122 Heap-Pufferüberlauf in Dawn , Chromiums WebGPU-Implementierung, in Google Chrome unter Android vor 151.0.7922.169 Stable 151, veröffentlicht am 18.08.2026. Grundursache laut Dawn-Fix-Comm...

SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automação de Exploração e Detecção Este programa Python é um invólucro da vulnerabilidade SMBGhost RCE. Todos os créditos pelo exploit funcional vão para chompie1337. Todos os créditos pelo scanner vão para ioncodes. Apenas automatizei estas funções em um programa. Você...

CVE-2026-76904

GeoServer Injeção de SQL para RCE Zero-Day CVE: CVE-2026-76904 | CVSS: 9.8 Crítico CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Esta vulnerabilidade recebeu o identificador GHSA-mqjf-5f49-2fjh atribuído pela equipe do GeoServer/GeoTools e está sendo ativamente explorada na natureza a partir de...

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

Autor do Exploit: Abdualhadi Khalifa https://x.com/absholi7ly Versão: Elementor Pro = 4.2.1 Testado em: WordPress + Elementor Pro 4.2.1 Windows / Laragon / Apache CVE: CVE-2026-32475 Créditos: Vulnerabilidade descoberta por Tin Pham TF1T por meio do Programa de Bug Bounty da Patchstack Categoria:...

CVE-2026-39987.py

CVE-2026-39987.py Este script Python explora o endpoint vulnerável marimo /terminal/ws e retorna um shell interativo. COMO USAR : A única alteração que precisa ser feita é mudar a variável HOST no script. Após alterar a variável HOST, execute o script no seu Terminal como no exemplo abaixo: EXEMP...

Exploit for Use After Free in Microsoft

Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Ento...

CVE-2026-71943

DrayTek VigorSwitch multiple models are affected by an OS command injection vulnerability in the setDevNet function. The root cause is insufficient filtering of the username and password fields before they are passed to command execution. A remote attacker with valid administrative credentials fo...

CVE-2026-71910

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function, caused by insufficient validation of the CMD0, CMD3, and CMD6 fields before command execution. A remote attacker with valid administrative credentials to the device's web management interface can...

CVE-2024-38856

CVE-2024-38856 Scanner RCE per Apache Ofbiz Descrizione Questo script è progettato per scansionare la vulnerabilità CVE-2024-38856 nelle applicazioni Apache Ofbiz, che può consentire l'esecuzione remota di codice. Invia richieste HTTP POST a percorsi specifici all'interno dell'applicazione Ofbiz...

CVE-2025-34085

CVE-2025-34085 — Exploit für nicht authentifizierte Remote-Codeausführung in WordPress Simple File List Ein automatisierter Exploit und Scanner für CVE-2025-34085 , eine kritische Schwachstelle im WordPress Simple File List Plugin, die nicht authentifizierte Remote-Codeausführung durch...

CVE-2024-8353-PoC

Proof-of-Concept-Code für CVE-2024-8353 Dieses Repository enthält ein Skript zur Ausnutzung der Sicherheitslücke CVE-2024-8353 im GiveWP-Plugin für WordPress. Diese Sicherheitslücke ermöglicht eine nicht authentifizierte PHP-Objektinjektion, die potenziell zu Remote-Code-Ausführung führen kann...

CVE-2021-41773---Apache-Path-Traversal---RCE

CVE-2021-41773 — Apache Path Traversal e RCE Compito di tirocinio: ITSOLERA PVT LTD — Sicurezza Offensiva Tirocinante: Areeba Zehra Jafri Team Leader: Muhammad Ahsan Ayaz Data: 18 marzo 2026 Panoramica Ricerca e sfruttamento di CVE-2021-41773 — vulnerabilità di Path Traversal ed esecuzione remota...

CVE-2023-32315

CVE-2023-32315 La console amministrativa di Openfire Admin Console, un'applicazione web, è risultata vulnerabile a un attacco di path traversal tramite l'ambiente di setup. Ciò ha permesso a un utente non autenticato di utilizzare l'ambiente di setup non autenticato di Openfire in un ambiente...