nmap-scripts

nmap-scripts scripts de nmap para las vulnerabilidades cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Existe una vulnerabilidad de ejecución remota de código en la forma en que el protocolo Microsoft Server Message Block 3.1.1 SMBv3 maneja ciertas solicitudes, también...

CVE-2020-14882

CVE-2020-14882 此脚本利用未经身份验证的GET请求在Oracle WebLogic Server上实现远程代码执行（RCE）。它利用了漏洞CVE-2020-14882。通过执行任意命令，攻击者可以未经授权地访问服务器。 漏洞利用详细信息 Exploit标题：Oracle WebLogic Server，通过GET请求实现未经身份验证的RCE Exploit作者：Danny Safaya CVE：CVE-2020-14882 厂商主页：Oracle WebLogic Server 软件链接：Oracle Middleware Downloads 更多信息：WebLogic R...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit Este exploit es una vulnerabilidad de ejecución remota de código en Ruby-on-Rails cuando se utiliza render sobre datos proporcionados por el usuario. Está escrito en python3, y recuerda instalar la librería requests. Aquí está el comando. root@kitploit: pip3 install...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

gimp: GIMP: Remote code execution via PSD file parsing integer overflow

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Arbitrary code execution via crafted TIF file parsing

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption,...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 这些工具是开源的，你可以重新编码它们，但请记住永远不要删除作者的工具。这些工具是免费的，不可出售！！！ Shell 结果取决于你的列表！！！ 在此，Jenderal92 不对因工具滥用而导致的网站系统损坏负责。无论是轻是重，一切都取决于使用情况！！！ 捐赠： BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

CVE-2026-27597

CVE-2026-27597 - 版本远程代码执行 快速使用 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 利用说明 严重性： 严重（CRITICAL） CVSS： 10.0 影响： 机密性、完整性、可用性 发布时间： 2026-02-25 技术摘要 Enclave 是一个安全的 JavaScript 沙箱，专为安全的 AI 代理代码执行而设计。在 2.11.1 版本之前，可以突破 @enclave-vm/core...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Deserialization Vulnerability in Microsoft Office SharePoint 🚀 Overview This lab demonstrates a deserialization vulnerability in Microsoft Office SharePoint that enables remote code execution RCE. The issue arises from improper handling of untrusted serialized data within...

cve-2019-5420-POC

Rails ActiveSupport 漏洞利用 cve-2019-5420 PoC（可用于链式攻击 CVE-2019-5418！） 与 CVE-2019-5418 完美搭配！ PoC 截图 🚨 警告 本仓库包含一个概念验证（PoC）漏洞利用 ，演示了通过滥用 ActiveSupport::MessageVerifier 在 Ruby on Rails 应用程序中实现远程代码执行（RCE） 。请负责任地使用！ 📌 概述 该脚本通过利用精心构造的 ERB 对象 （包裹在 DeprecatedInstanceVariableProxy 中）来利用 ActiveSupport 反序列化漏洞...

CVE-2026-0911

CVE-2026-0911 — PoC de importación de módulos Hustle Herramienta de investigación / asistente de pentest que prueba el comportamiento de carga a través del endpoint de importación de módulos que requiere autenticación, en el marco de CVE-2026-0911 para el plugin de WordPress Hustle wordpress-popu...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147 Desbordamiento de búfer basado en pila en gmtremotedatasetid Resumen Se identificó una vulnerabilidad de desbordamiento de búfer basado en pila en la función gmtremotedatasetid dentro de src/gmtremote.c. Este problema ocurre cuando se pasa una cadena larga...

CVE-2026-3854

CVE-2026-3854：通过 X-Stat 头注入在 GitHub 上实现 RCE 关于 Wiz Research 在 GitHub.com 和 GitHub Enterprise Server 的内部 git push 管道中发现该漏洞的实用摘要。 警告 本材料仅供教育和进攻性安全研究之用。 该漏洞已在所有受支持的版本中被 GitHub 修复。 请勿尝试针对非您所有或未经您书面明确授权的环境进行复现。未经授权访问系统在巴西属于犯罪行为（第 12.737/2012 号法律，即 Carolina Dieckmann 法），可能构成计算机设备入侵罪，可判处拘留。 摘要的摘要...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC La vulnerabilidad en Langflow 1.8.1 y versiones anteriores permite a un atacante remoto no autenticado lograr la ejecución arbitraria de comandos en el host. Descripción El endpoint POST /api/v1/buildpublictmp/flowid/flow permite a cualquier persona construir flujo...