Nostromo_Python3

Código Exploit de Nostrom RCE para Python3: Uso: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

CVE-2018-16167

Orden de instalación y ejecución 0. Instalación de LogonTracer Descargue desde dockerhub la versión 1.2.0 de logontracer, en la que se encontró una vulnerabilidad. $docker pull jpcertcc/docker-logontracer:v1.2.0 1. Ejecución de LogonTracer Ejecute en el contenedor con el siguiente comando:...

CVE-2026-39636-vulnerability-exp

1. Antes de ejecutar aquí, debe abrir burp suite !! Y el puerto predeterminado de burp suite debe ser 8080; si es otro, puede cambiarlo por su cuenta. 2. Descargar las bibliotecas necesarias pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Simplemente ejecútelo Script...

CVE-2021-44228-VULN-APP

CVE-2021-44228-VULN-APP NOTA: Esta es una máquina virtual vulnerable para mostrar qué es realmente esta vulnerabilidad log4j, ¡y demás! Instalación: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Escuchando en el puerto 8080...

CVE-2026-101065

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-101065 Obot Quickstart Docker Deployment Unauthenticated Admin Access

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-101065

The Obot open-source AI agent/MCP platform is vulnerable in all versions up to and including commit d7e6970 . The issue stems from the Docker quickstart command in the README, which initializes the container listening on 0.0.0.0:8080 with authentication disabled by default. Under these conditions...

EUVD-2026-88030

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

cve-2018-11776-docker

Contenedor Docker y exploit PoC de CVE-2018-11776 escrito en Go Puedes construir tu propia imagen y ejecutarla: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename O simplemente puedes usar la que creé con cariño para ti: docker container run -it --rm -p...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 Únete a t.me/SpiderzTM Dorks de Shodan y FOFA Usa los siguientes dorks para encontrar sistemas potencialmente vulnerables: Dorks de Shodan: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 Dorks de FOFA: app="Toshiba-e-Studio" title="Toshiba...

EUVD-2026-77755

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

CVE-2026-77884 Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

gha-lab-5ed08d6a80

z80pack z80pack ist ein ausgereifter Emulator mehrerer Plattformen mit 8080- und Z80-CPU. Die vollständige Dokumentation finden Sie unter https://www.icl1900.co.uk/unix4fun/z80pack Ubuntu Erstellen Installieren Sie zuerst die benötigten Abhängigkeiten für X11: root@kitploit: sudo apt install...

EUVD-2026-57012

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables,...

CVE-2026-15562

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

Improper Access Control

mcppinotserver is vulnerable to Improper Access Control. The vulnerability is due to the MCP server defaulting to an unauthenticated HTTP service bound to 0.0.0.0:8080, which allows an attacker on the network to access MCP tools and exploit the server's Pinot credentials to execute unauthorized S...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224 Unauthenticated IPv6 WAN Management Exposure

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...