CVE-2022-46169

Cacti | Bypass de Autenticação | RCE | CVE-2022-46169 Cacti: Exploit de Execução Remota de Código Não Autenticado em Ruby Cacti Docker Esta é uma aplicação dockerizada que é vulnerável à vulnerabilidade RCE do Cacti CVE-2022-46169. Siga o link para colocar o Cacti em funcionamento root@kitploit:...

CVE-2021-3064

CVE-2021-3064: Pan-OS Buffer Overflow Remoto + HTTP Smuggling Exploração Este exploit utiliza uma vulnerabilidade de HTTP Smuggling para entregar um payload a um endpoint que de outra forma seria inacessível em firewalls Pan-OS; o endpoint é vulnerável a um estouro de buffer que pode ser explorad...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE RCE não autenticada Joomla! JCE extension 2.9.99.5 - Upload Arbitrário de Arquivo PHP e Execução Remota de Código não autenticados 🔎 Consultas em Mecanismos de Busca Shodan...

langflow-CVE-2026-33017-poc

CVE-2026-33017 — Langflow बिना प्रमाणीकरण वाला RCE PoC केवल शैक्षिक और अधिकृत परीक्षण प्रयोजनों के लिए। सारांश Langflow = 1.8.1 एक सार्वजनिक फ्लो निर्माण एंडपॉइंट उजागर करता है जो हमलावर-नियंत्रित फ्लो डेटा स्वीकार करता है जिसमें मनमाना कोड होता है। यह कोड validate.py में prepareglobalscope को भे...

CVE-2025-13486

🔴 CVE-2025-13486 - Exploração do Plugin WordPress Advanced Custom Fields Extended ACFE 📋 Visão Geral Exploit de prova de conceito para a CVE-2025-13486 , uma vulnerabilidade crítica no plugin WordPress Advanced Custom Fields: Extended ACFE que permite a Execução Remota de Código RCE levando à...

CVE-2026-78317 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64762

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...

EUVD-2026-64761

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78316

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows a remote attacker to achieve remote code execution . The attack vector is network-based with low complexity and requires only low privileges and no user interaction , resulting in high impact across confidentia...

CVE-2026-78316 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78315

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows an attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low attack complexity, and low privileges required. CISA's SSVC assessment indicates no known...

CVE-2026-78315 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64760

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

zoneminder_CVE-2023-26035

استغلال - ZoneMinder CVE-2023-26035 يوجد تنفيذ تعليمات برمجية عن بعد غير مُصدق عليه RCE يؤثر على لقطات ZoneMinder. هذا استغلال لـ CVE-2023-26035. الإصدارات المتأثرة ZoneMinder 1.36.33 و ZoneMinder 1.37.33. الاستخدام التحقق مما إذا كان الهدف ضعيفًا: root@kitploit: python3 zoneminder.py http://targ...

CVE-2026-78314 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64759

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78314

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows a remote attacker with low privileges to achieve remote code execution . The attack requires no user interaction, has low complexity, and is exploitable over the network. The NVD-assigned CVSS 3.1 score is 8.8 ...

CVE-2024-36104-PoC

CVE-2024-36104-PoC Prova de conceito para CVE-2024-36104, uma vulnerabilidade de execução remota de código não autenticada no Apache OFBiz anterior à versão 18.12.14. O ControlServlet do OFBiz resolve uma view não autenticada forgotPassword antes de canonicalizar o caminho da requisição. Anexar...

mvn_pwn

MVN PWN दुर्भावनापूर्ण Maven pom.xml जो RCE प्राप्त करने के लिए "groovy-maven-plugin" का उपयोग करता है निर्भरताओं सहित पूरा पेलोड निम्नलिखित ब्लॉग पर पाया जा सकता है: https://security.humanativaspa.it/abusing-mavens-pom-xml/...