Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

[SECURITY] [DLA 4764-1] libdbi-perl security update

Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...

nextjs-CVE-2025-29927

nextjs-CVE-2025-29927 一个用于检测 CVE-2025-29927（Next.js 身份验证绕过漏洞）的 Nuclei 模板。如果你想确切了解此漏洞的工作原理，可以在此处阅读原始研究人员的精彩文章：here 这个模板非常直接。它做两件事：首先，识别网站是否使用 Next.js；然后，通过特定响应头的存在来测试目标是否利用了中间件。当这两者通过 HTTP 头同时存在时，此模板将识别出来。我编写此模板是为了帮助团队快速在其 Web 应用中搜寻 CVE-2025-29927 的存在，严格禁止任何其他用途。 免责声明 此模板不会发现每一个受 CVE-2025-29927...

CVE-2019-0841-BYPASS

Este repositorio no tiene un README...

Apache-APISIX-CVE-2022-24112

Exploit de Ejecución Remota de Código en Apache APISIX CVE-2022-24112 Resumen Un atacante puede abusar del plugin batch-requests para enviar solicitudes y eludir la restricción de IP de la Admin API. Una configuración predeterminada de Apache APISIX con la clave de API predeterminada es vulnerabl...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Lectura/Inclusión remota limitada de archivos Endpoints vulnerables: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS → RCE PoC 漏洞利用 该仓库包含针对 CVE-2015-0345 APSB15-07 的 XSS 向量，允许在 ColdFusion 安装上获取远程命令执行权限。 此漏洞仅适用于 ColdFusion 10 和 11 安装。具体来说，ColdFusion 11 Update 11 和 ColdFusion 10 Update 16 修复了这两个问题。有关此披露的更多信息，请参见此处。 Payload 1 此 payload 会禁用 ColdFusion 管理面板的密码要求。如果由 ColdFusion 管理员交付并运行，则...

OurSharePoint-CVE-2025-53770

OurSharePoint — CVE-2025-53770 PoC 独立自包含的单二进制 SharePoint RCE 工具。生成 TypeConfuseDelegate 利用链作为原始 MS-NRBF 字节（无需 ysoserial.exe），将其包装在 DataSet 反序列化载荷中，并通过 HTTP 利用身份验证绕过进行传递——全部一次性完成。 利用链 步骤| CVE| 描述 ---|---|--- 1| CVE-2025-49706| 身份验证绕过 — Referer: /layouts/SignOut.aspx 跳过 SharePoint 身份验证 2|...

CVE-2020-17530

S2-061 脚本皆根据vulhub的struts2-059/061漏洞测试环境来写的，不具普遍性，还望大佬多多指教 struts2-061-poc.py（可执行简单系统命令） 用法：python struts2-061-poc.py http://ip:port command 例子：python struts2-061-poc.py http://192.168.0.7:8080 whoami S2-061-shell.py（可反弹shell） 用法： 1. 首先在一台机器A上监听指定端口例如：nc -lvvp 7777） 2. 执行脚本：python2 S2-061-shell.p...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Critical Password Reset Vulnerability Discovered by: Theo Cia CVE: CVE-2025-67070 Status: Reported to vendor Date Discovered: November 2025 Impact: Full administrative access via MFA bypass Firmware: V2.800.00IB00C.0.T Build Date: 2022-08-17 Summary A critical...

CVE-2025-53770

Exploit RCE de SharePoint ToolPane Kit de herramientas de investigación de seguridad para probar vulnerabilidades de SharePoint ToolPane Descripción general • Características • Primeros pasos • Uso • Estructura del proyecto Este repositorio contiene exploits de prueba de concepto y herramientas d...

CVE-2025-31161

CVE-2025-31161 CVE-2025-31161 / CVE-2025-2825 的概念验证 此POC将利用身份验证绕过漏洞创建一个具有管理员级别权限的新用户账户。身份验证绕过需要CrushFTP服务器上现有用户的用户名（targetuser）。默认设置为crushadmin 用法 root@kitploit: usage: cve-2025-31161.py -h --targethost TARGETHOST --port PORT --targetuser TARGETUSER --newuser NEWUSER --password PASSWORD Exploit...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php 未授权命令注入漏洞。 认证绕过 添加 X-Forwarded-For 请求头即可绕过认证，注意其值并非固定值。 暴力枚举 使用 Burp Intruder 对 hostid 和 localdataids 的值进行模糊测试。 远程命令执行 命令注入点位于 pollerid 参数。 root@kitploit: GET...

CVE-2026-71257

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...

CVE-2020-15906

CVE-2020-15906 Escrito de CVE-2020-15906. Agradecimientos especiales a Frederic Mohr Lastbreach por su soporte de backend. Tiki Wiki Cms Groupware 16.x - 21.1 Bypass de Autenticación por Maximilian Barz He encontrado una nueva vulnerabilidad en TikiWiki Cms Groupware 16.x - 21.1. Permite a...

WordPress MyHome Core plugin <= 4.4.5 - Authentication Bypass to Account Takeover vulnerability

Authentication Bypass to Account Takeover vulnerability discovered by Rafie Muhammad in WordPress Plugin MyHome Core versions = 4.4.5...

CVE-2026-12894

The Qute template engine in Quarkus is vulnerable to server-side template injection (SSTI) via the ReflectionValueResolver component, which fails to properly block access to sensitive Java internal functions when processing certain data types like Enums. An attacker who can provide or influence t...