Nostromo_Python3

Nostrom RCE Python3 Эксплойт код: Использование: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

CVE-2026-39636-vulnerability-exp

1. Avant d'exécuter ici, vous devez ouvrir Burp Suite !! Et le port par défaut de Burp Suite doit être 8080. S'il est différent, vous pouvez le modifier vous-même. 2. Téléchargez les bibliothèques nécessaires pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Exécutez...

CVE-2021-44228-VULN-APP

CVE-2021-44228-VULN-APP ПРИМЕЧАНИЕ: Это уязвимая виртуальная машина, демонстрирующая, что такое уязвимость log4j и так далее! Установка: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Прослушивание на порту 8080...

CVE-2018-16167

Порядок установки и запуска 0. Установка LogonTracer Загружаем с dockerhub версию logontracer 1.2.0, в которой была обнаружена уязвимость. $docker pull jpcertcc/docker-logontracer:v1.2.0 1. Запуск LogonTracer Запускаем контейнер следующей командой: $docker run \ --detach \ --publish=7474:7474...

cve-2018-11776-docker

CVE-2018-11776 Docker-контейнер и POC-эксплойт, написанный на Go Вы можете собрать свой собственный образ и запустить его: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename Или просто стянуть образ, который я создал с любовью для вас: docker container run -i...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 Подпишись на t.me/SpiderzTM Shodan и FOFA дорки Используйте следующие дорки для поиска потенциально уязвимых систем: Shodan дорки: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 FOFA дорки: app="Toshiba-e-Studio" title="Toshiba e-Studio"...

CVE-2026-101065

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-101065 Obot Quickstart Docker Deployment Unauthenticated Admin Access

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-101065

The Obot open-source AI agent/MCP platform is vulnerable in all versions up to and including commit d7e6970 . The issue stems from the Docker quickstart command in the README, which initializes the container listening on 0.0.0.0:8080 with authentication disabled by default. Under these conditions...

EUVD-2026-88030

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-77884 Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

EUVD-2026-77755

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

gha-lab-5ed08d6a80

z80pack z80pack ist ein ausgereifter Emulator mehrerer Plattformen mit 8080- und Z80-CPU. Die vollständige Dokumentation finden Sie unter https://www.icl1900.co.uk/unix4fun/z80pack Ubuntu Erstellen Installieren Sie zuerst die benötigten Abhängigkeiten für X11: root@kitploit: sudo apt install...

EUVD-2026-57012

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables,...

CVE-2026-15562

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

Improper Access Control

mcppinotserver is vulnerable to Improper Access Control. The vulnerability is due to the MCP server defaulting to an unauthenticated HTTP service bound to 0.0.0.0:8080, which allows an attacker on the network to access MCP tools and exploit the server's Pinot credentials to execute unauthorized S...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224 Unauthenticated IPv6 WAN Management Exposure

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...