Lucene search
+L

88928 matches found

Kitploit
Kitploit
•added 2026/09/28 10:44 p.m.•15 views

VulnerableSpringDataRest

Aplicación Spring DataRest Vulnerable Esta es una aplicación Spring Data REST diseñada intencionalmente para probar y demostrar la vulnerabilidad CVE-2017-8046 y los desafíos de probar la inyección de comandos y la ejecución remota de código a través de APIs REST Tiene soporte para Swagger UI par...

9.8CVSS8.3AI score0.7453EPSS
SaveExploits8
CVE
CVE
•added 2026/09/28 10:30 p.m.•16 views

CVE-2026-101261

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located in an unspecified part of the /api/ZRnetwork/firstSetup_wifi file, where a manipulation of the login_pwd argument allows for remote command execution. An exploit has been published and may be used...

9.4CVSS8AI score0.02362EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 10:29 p.m.•8 views

CVE-2019-15107

CVE-2019-15107 Este repositorio contiene un pequeño script en bash para explotar CVE-2019-15107 sin usar Metasploit. Su uso es bastante sencillo, solo descarga y ejecuta, sin dependencias. root@kali: ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a' Error - Perl execution failed Your password ha...

10CVSS8.7AI score0.9971EPSS
SaveExploits40
Cvelist
Cvelist
•added 2026/09/28 10:15 p.m.•24 views

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

9.4CVSS0.02336EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 10:15 p.m.•19 views

CVE-2026-101260

A command injection vulnerability exists in Ziroom ZHOME A0101 version 1.0.1.0 . The flaw is located within an unknown functionality of the /api/ZRnetwork/firstLogin file, where manipulating the firstLogin argument allows for remote command execution. The vulnerability has a CRITICAL severity rat...

9.4CVSS8.2AI score0.02336EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 10:15 p.m.•4 views

CVE-2026-101260 Ziroom ZHOME A0101 firstLogin command injection

A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file /api/ZRnetwork/firstLogin. Performing a manipulation of the argument firstLogin results in command injection. The attack is possible to be carried out remotely. The exploit...

9.4CVSS5.6AI score0.02336EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 9:48 p.m.•8 views

CVE-2026-9277

CVE-2026-9277 - Exploit de Inyección de Comandos en Shell-Quote Un script de exploit Proof of Concept PoC especializado diseñado para verificar y demostrar CVE-2026-9277 , una vulnerabilidad estructural de inyección de comandos encontrada en versiones heredadas de la librería shell-quote = 1.8.3...

9.2CVSS8AI score0.00824EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 9:47 p.m.•15 views

codeql-workshop

Encontrando vulnerabilidades con CodeQL Taller original de Sylwia Budzynska Requisitos previos • Recursos • Taller ¿Para quién es? : Ingenieros de seguridad, investigadores de seguridad y desarrolladores. Lo que aprenderás : Aprende a usar CodeQL para explorar código y para encontrar problemas de...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 9:47 p.m.•7 views

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Enigma. 🔍 Key Findings Insecure NFS Share Exposing Onboarding Documents - Medium Severity Internal Credential Disclosure via Unencrypted Email Content -...

9.4CVSS5.9AI score0.02013EPSS
SaveExploits15References2
Kitploit
Kitploit
•added 2026/09/28 9:26 p.m.•13 views

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关! Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

9.8CVSS8.6AI score0.99954EPSS
SaveExploits63
NVD
NVD
•added 2026/09/28 9:17 p.m.•7 views

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS0.02336EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 8:45 p.m.•3 views

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS5.8AI score0.02336EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 8:45 p.m.•7 views

EUVD-2026-88546

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS7.9AI score0.02336EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:45 p.m.•33 views

CVE-2026-101187 Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

9.4CVSS0.02336EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 8:45 p.m.•13 views

CVE-2026-101187

A command injection vulnerability exists in the USB Device Management API of Ziroom ZHOME A0101 version 1.0.1.0. The flaw is located in the pop_usb_device function within the file usr/lib/lua/luci/controller/api/zrUsb.lua. By manipulating the argument path, an attacker can execute arbitrary comma...

9.4CVSS8.1AI score0.02336EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 7:38 p.m.•9 views

CVE-2017-1000117

CVE-2017-1000117 Descripción del proyecto Uno de los temas seleccionados para el diseño del curso de seguridad en redes. Reproducción de la vulnerabilidad CVE-2017-1000117 PoC+Exp Git + SSH Resumen de la vulnerabilidad: Nombre de la vulnerabilidad: Vulnerabilidad de inyección de comandos Git ID...

8.8CVSS7.6AI score0.77823EPSS
SaveExploits9References6
Kitploit
Kitploit
•added 2026/09/28 7:18 p.m.•11 views

CVE-2022-36779

Inyección de comandos autenticada para CVE-2022-36779 disfruta :...

9.8CVSS8.1AI score0.02881EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/28 7:16 p.m.•16 views

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview Field| Details ---|--- CVE ID| CVE-2025-69212 Severity| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OS Command Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Function| XML::decodeP7M in...

9.4CVSS6.8AI score0.02013EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/28 7:05 p.m.•13 views

CVE-2026-69212

CVE-2025-69212 — Inyección de comandos del sistema operativo en OpenSTAManager RCE Prueba de concepto del exploit para CVE-2025-69212 , una vulnerabilidad de inyección de comandos del sistema operativo en OpenSTAManager ;echo ".p7m Ejecución resultante en el shell: openssl smime ... -in...

9.4CVSS6.3AI score0.02013EPSS
SaveExploits15References2
Kitploit
Kitploit
•added 2026/09/28 7:00 p.m.•14 views

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...

8.8CVSS6.7AI score0.00529EPSS
SaveExploits1References2
Rows per page
Query Builder