CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Utilizzo e Sicurezza Importante — Leggi prima questo: Questo repository e exploit.py sono forniti solo a scopo educativo e di ricerca. Non utilizzare questo codice contro sistemi, reti o servizi per i quali non si dispone di autorizzazione...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2025-54123

CVE-2025-54123 - Hoverfly-Befehlsinjektion RCE PoC CVE-2025-54123 - Middleware-Befehlsinjektion in Hoverfly 📌 CVE-Details ID : CVE-2025-54123 Typ : Befehlsinjektion / Remote-Code-Ausführung RCE Anbieter : Hoverfly Auswirkungen : Erlaubt authentifizierten Angreifern, beliebige Systembefehle über d...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - Vulnerabilidade de Injeção SQL no OpenEMR 8.0.0 Fraqueza CWE-89 Neutralização Incorreta de Elementos Especiais usados em um Comando SQL 'Injeção SQL' O produto constrói todo ou parte de um comando SQL usando entrada influenciada externamente de um componente upstream, mas não...

CVEs

CVE-2022-2992: Esecuzione remota di comandi tramite importazione da Github Informazioni Descrizione: Ciò consente a un utente autenticato di ottenere l'esecuzione remota di codice tramite l'endpoint Import from GitHub API. Versioni interessate: tutte le versioni dalla 11.10 precedenti alla 15.1.6...

CVE-2024-43425-Poc

CVE-2024-43425-Poc CVE-Übersicht CVE ID: CVE-2024-43425 Beschreibung: Moodle erlaubt es einem authentifizierten Benutzer mit Lehrerrechten, über die Quiz-Editor-Oberfläche eine schädliche berechnete Frage hochzuladen. Auswirkung: Remote Code Execution RCE Ursache: Unzureichende Bereinigung von...

CVE-2021-45010

CVE-2021-45010 Exploit-Titel: Tiny File Manager 2.4.6 Authentifiziert Remote-Codeausführung Datum: 04 Mar 2023 Exploit-Autor: Syd Software Link: https://github.com/prasathmani/tinyfilemanager Version: Tiny File Manager = 2.4.3 Getestet auf: Parrot OS 20.04 CVE : CVE-2021-45010 Referenz:...

CVE-2021-31630

OpenPLC WebServer v3 - RCE authentifié CVE-2021-31630 Cet exploit est basé sur l'exploit de Exploit-DB créé par Fellipe Oliveira. Tout d'abord, s'authentifier Télécharger un fichier C malveillant Le compiler Démarrer le PLC lancer le reverse shell Arrêter le PLC inutile de le faire tourner, le...

Exploit-for-CVE-2024-46987

Exploit-for-CVE-2024-46987 Exploit für CVE-2024-46987 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --file FILE Beschreibung der Schwachstelle Camaleon CMS ist ein Content-Management-System, das auf Ruby on Rails basiert. Eine Pfad-Traversal-Schwachstelle im MediaControll...

CVE-2026-33917_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-33917 - Vulnerabilidade de Injeção SQL no OpenEMR Fraqueza CWE-89 Neutralização inadequada de elementos especiais usados em um comando SQL 'Injeção SQL' O produto constrói todo ou parte de um comando SQL usando entrada influenciada externamente de um componente upstream, mas não neutrali...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 RCE Autenticado Através de Upload de Arquivo de Configuração Malicioso CVE-2018-19537 Descrição Existe uma vulnerabilidade de execução remota de código RCE autenticada em todas as versões de firmware publicadas para o roteador TP-Link Archer C5. Ao fazer upload de um arquivo de...

Centreon-20.04

CVE-2020-12688 - Аутентифицированное удаленное выполнение кода Centreon 20.04 Переменная имени команды в minHelpCommand.php RCE CVE-2020-12688 Документация последнего релиза Centreon: https://docs.centreon.com/current/en/releases/centreon-core.html Обнаружено: TheCyberGeek Дата обнаружения:...

cve-2026-26114-poc

CVE-2026-26114 Utilizzare solo in laboratorio o in sistemi autorizzati ai test. Python PoC root@kitploit: pip install requests requests-ntlm python poc/cve202626114rce.py ^ --target http://sharepoint.local ^ --username spuser1 ^ --password "Password123!" ^ --domain SP19 ^ --cmd "cmd /c whoami...

CVE-2021-35215

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialisierung RCE, Anmeldung erforderlich. PoC root@kitploit: POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787...

CVE-2026-9809

CVE-2026-9809 CVE-2026-9809 è una vulnerabilità di Cross-Site Scripting persistente Stored XSS che interessa Mautic 7 versioni dalla 7.0.0 alla 7.1.1. La falla risiede nel componente Projects, in cui i nomi dei progetti vengono visualizzati come tag e popover al passaggio del mouse sulle pagine...

CVE-2026-22226

CVE-2026-22226 CVE-2026-22226 के लिए प्रूफ ऑफ कॉन्सेप्ट TP-Link Archer वाई-फाई राउटर्स के VPN क्लाइंट में प्रमाणित LAN-साइड OS कमांड इंजेक्शन भेद्यता संक्षिप्त VPN क्लाइंट कंट्रोलर उपयोगकर्ता-नियंत्रित एंट्री विवरण des को कमजोर सत्यापन रेगेक्स के साथ UCI कॉन्फ़िगरेशन में संग्रहीत करता है। जब बाद...

CVE-2018-18852

CERIO router RCE autenticato credenziali backdoor del fornitore CVE-2018-18852 PoC Python hook-s3c github.com/hook-s3c, @hooks3c su Twitter PoC Python funzionante per CVE-2018-18852, originariamente apparso su; https://github.com/hook-s3c/CVE-2018-18852 Che succede I modelli e le varianti dei...

CVE-2026-29115

CVE-2026-29115 — दहुआ प्रमाणित दूरस्थ सेवा अस्वीकार परामर्श प्रकार: विक्रेता-समन्वित सुरक्षा प्रकटीकरण CVE आईडी: CVE-2026-29115 विक्रेता: दहुआ प्रौद्योगिकी प्रकाशित: 2026-06-10T06:08:21 UTC अंतिम संशोधित: 2026-06-10T06:08:21 UTC स्रोत: दहुआ उत्पाद सुरक्षा घटना PSI ट्रस्ट सेंटर विषय-सूची कार्यकारी...

CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-

CVE-2026-34156 – NocoBase सैंडबॉक्स एस्केप RCE -orange प्रमाणित रिमोट कोड निष्पादन NocoBase संस्करण ≤ 2.0.26 में वर्कफ़्लो सैंडबॉक्स एस्केप के माध्यम से। 📋 विवरण CVE-2026-34156, NocoBase वर्कफ़्लो इंजन में एक सैंडबॉक्स एस्केप भेद्यता है। एक प्रमाणित हमलावर एक दुर्भावनापूर्ण वर्कफ़्लो बना सकता है ...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Esecuzione remota di codice autenticata in Pluck CMS precedente alla versione 4.7.13. Il file manager dell'amministratore admin.php?action=files non convalida le estensioni dei file, consentendo il caricamento di file .phar che Apache esegue come PHP. Il caricamento di...