512874 matches found
CVE-2024-28397-RCE
CVE-2024-28397-RCE CVE-2024-28397 - Execução Remota de Código a partir do JS2PY Vulnerável Uso: python3 exploit.py...
CVE-2026-78314
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78316
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78317
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78315
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2021-41078
CVE-2021-41078 nameko – Beliebige Codeausführung durch YAML-Deserialisierung NVD-Beschreibung Nameko bis 2.13.0 kann dazu verleitet werden, beliebigen Code auszuführen, wenn die Konfigurationsdatei deserialisiert wird. Demo Einrichtung 1. Erstellen Sie ein Image aus einem Dockerfile root@kitploit...
n8n-CVE-2025-68613-exploit
n8n - CVE-2025-68613: Controle Impróprio de Recursos de Código Gerenciados Dinamicamente Vulnerabilidade n8n contém uma vulnerabilidade crítica de Execução Arbitrária de Código em seu sistema de avaliação de expressões de workflow. Sob certas condições, expressões fornecidas por usuários...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea سكربت لاستغلال CVE-2020-14144 - تنفيذ التعليمات البرمجية عن بُعد بعد المصادقة في GiTea باستخدام git hooks الميزات توليد تلقائي لحمولة القشرة العكسية Reverse Shell من IP والمنفذ رفع سكربت شل مخصص وتنفيذه عن بُعد باستخدام الخيا...
CVE-2025-54123
CVE-2025-54123 Prova de Conceito de Injeção de Comando para RCE no Hoverfly Visão Geral Este repositório contém um script de prova de conceito PoC em Python para interagir com instâncias do Hoverfly afetadas pela CVE-2025-54123. O script suporta: Autenticação usando credenciais de nome de...
Vulnerabilities present in Atlassian products
Atlassian has hidden vulnerabilities in various products such as Bamboo, Bitbucket, Confluence, Jira, Crowd, and Fisheye. These vulnerabilities exist in various third-party products for which updates have already been released. Atlassian has incorporated these updates into its own products...
CVE-2022-3552
CVE-2022-3552 BoxBilling=4.22.1.5 - Remote Code Execution RCE Verwendung root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...
CVE-2022-46169
Cacti | Bypass de Autenticação | RCE | CVE-2022-46169 Cacti: Exploit de Execução Remota de Código Não Autenticado em Ruby Cacti Docker Esta é uma aplicação dockerizada que é vulnerável à vulnerabilidade RCE do Cacti CVE-2022-46169. Siga o link para colocar o Cacti em funcionamento root@kitploit:...
CVE-2021-3064
CVE-2021-3064: Pan-OS Buffer Overflow Remoto + HTTP Smuggling Exploração Este exploit utiliza uma vulnerabilidade de HTTP Smuggling para entregar um payload a um endpoint que de outra forma seria inacessível em firewalls Pan-OS; o endpoint é vulnerável a um estouro de buffer que pode ser explorad...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE RCE não autenticada Joomla! JCE extension 2.9.99.5 - Upload Arbitrário de Arquivo PHP e Execução Remota de Código não autenticados 🔎 Consultas em Mecanismos de Busca Shodan...
langflow-CVE-2026-33017-poc
CVE-2026-33017 — Langflow Nicht authentifizierter RCE PoC Nur für Bildungszwecke und autorisierte Tests. Zusammenfassung Langflow = 1.8.1 stellt einen öffentlichen Flow-Build-Endpunkt bereit, der vom Angreifer kontrollierte Flow-Daten mit beliebigem Code akzeptiert. Dieser Code wird an...
CVE-2025-13486
🔴 CVE-2025-13486 - Exploit für das WordPress-Plugin Advanced Custom Fields Extended ACFE 📋 Übersicht Proof-of-concept-Exploit für CVE-2025-13486 , eine kritische Schwachstelle im Advanced Custom Fields: Extended ACFE WordPress-Plugin, die Remote Code Execution ermöglicht, was zur Privilege...
CVE-2026-78317 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
EUVD-2026-64762
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78317
A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...