515656 matches found
CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...
CVE-2025-55182-POC
CVE-2025-55182-POC React2Shell POC Usage: root@kitploit: sudo python3 hehe.py -t -c Example: root@kitploit: β― sudo python3 hehe-t 12.05.12.05 -c "id" . .. . | \ | | / \ / || || | | | / || | | | | || | | | | | | | | / ^ \ | ,----'---| |----| | | | | ----| || | | | | | | | | / | | / /\ \ | | | | | ...
CVE-2025-4389
ExplotaciΓ³n de CVE-2025-4389 Detalles Publicado : 16 de mayo de 2025 Actualizado : 17 de mayo de 2025 Gravedad : CrΓtica PuntuaciΓ³n CVSS: 9.8 CWE : CWE-434: CWE-434 Subida sin restricciones de archivos con tipo peligroso Versiones afectadas : Todas las versiones desde n/a hasta 2.6.8.1 Investigad...
CVE-2024-32004
root@kitploit: Crear el repositorio tmp, establecer uploadpack.allowfilter como true git init tmp git -C tmp config uploadpack.allowfilter 1 Clonar evil desde el repositorio tmp git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configurar el script de filtro remoto git -C...
CVE-2025-56815
CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. root@kitploit: POST...
React-2-Shell
Esta es una herramienta de explotaciΓ³n de seguridad dirigida a CVE-2025-55182. Explota una vulnerabilidad de ejecuciΓ³n remota de cΓ³digo RCE en React Server Components. π₯ Antecedentes de CVE-2025-55182 CVE-2025-55182 tambiΓ©n conocido ampliamente como βReact2Shellβ es una vulnerabilidad crΓtica de...
CVE-2022-29078
CVE-2022-29078 | EJS SSTI β RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...
log4j-log4shell-affected
log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...
watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553
CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...
CVE-2026-5524-PoC
CVE-2026-5524 β Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 β Exploit RCE de Searchor PoC EjecuciΓ³n Remota de CΓ³digo RCE mediante uso inseguro de eval en Searchor 2.4.2 Resumen Este proyecto demuestra la explotaciΓ³n de CVE-2023-43364 , una vulnerabilidad de EjecuciΓ³n Remota de CΓ³digo RCE que afecta al paquete Python Searchor 2.4.2. El...
CVE-2019-11395
CVE-2019-11395 Exploit π‘οΈ About CVE-2019-11395 π΅οΈ The CVE-2019-11395 vulnerability describes a buffer overflow vulnerability in the MailCarrier 2.51 email application, allowing remote code execution. The vulnerability occurs in SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR processes...
CVE-2026-7574
π¨ CVE-2026-7574 β Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass π₯ Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...
CVE-2026-12485
π¨ CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E β Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 β Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...
CVE-2026-48907
CVE-2026-48907 β Joomla JCE Unauthenticated RCE Lab PSsec Educational security research lab for CVE-2026-48907. Overview CVE-2026-48907 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability in JCE Joomla Content Editor , the most widely installed editor extension for Joomla,...
Code-27-Companion-Hub-Exploits
Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...
proofpoint-CVE-2023-0090
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Unauthenticated RCE CVE: CVE-2023-0090 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Proofpoint...
CVE-2024-4577-RCE-EXP
TG Join Us https://t.me/WanLiChangChengWanLiChang Γnete a nosotros para recibir periΓ³dicamente varios exploits y POCs de vulnerabilidades. CVE-2024-4577-RCE-EXP CVE-2024-4577 Vulnerabilidad de ejecuciΓ³n remota de cΓ³digo en PHP CGI en plataforma Windows CVE-2024-4577 Vulnerabilidad de ejecuciΓ³n...
cisco-CVE-2023-31488
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Timeline: Discovered - ly1g3...
cisco-CVE-2023-20009
About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...