Variatype.htb-CVE-2025-66034

Hackthebox Season 10 - Variatype Este script te dará acceso inicial. Primero, instala los módulos requeridos usando pip pip3 install -r requirements.txt Uso python3 exploit.py 'id' o python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2022-1388

CVE-2022-1388 https://support.f5.com/csp/article/K23605346 Esta vulnerabilidad podría permitir que un atacante no autenticado, a través del puerto de administración y/o su propia dirección IP, acceda a la red del sistema BIG-IP para ejecutar comandos arbitrarios del sistema, crear o eliminar...

Struts2-045-Exp

Herramientas de Explotación Struts2 S2-045 CVE-2017-5638 Función de Explotación: Ejecución de Comandos Obtener la Ruta Física del Sitio Web Objetivo Subida de Archivos Obtener Shell Webshell Predeterminada para Chopper Soporte HTTP/HTTPS Soporte URL con Cualquier Puerto Nota: La contraseña de la...

OpenSMTPD-CVE-2020-7247-

Vulnerabilidad de ejecución remota de comandos en OpenSMTPD CVE-2020-7247 WHS 4기 박솔민 Enlace original: https://github.com/vulhub/vulhub/blob/43eae7170d09e7748c3aac64cd6a8e5af508a8ef/opensmtpd/CVE-2020-7247/README.md Resumen OpenSMTPD es un programa servidor SMTP utilizado en sistemas operativos ti...

CVE-2022-26134_conFLU

CVE-2022-26134 - conFLU PoC para explotar CVE-2022-26134 en Atlassian Confluence Uso del exploit python3 conFLU.py -h Usage: conFLU.py -h -u URL -f F -cmd CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url -f F, --file F url file -c CMD, --command CMD...

CVE-2011-1571

CVE-2011-1571 Resumen Vulnerabilidad no especificada en el portlet XSL Content de Liferay Portal Community Edition CE 5.x y 6.x anteriores a 6.0.6 GA, cuando se usa Apache Tomcat, permite a atacantes remotos ejecutar comandos arbitrarios mediante vectores desconocidos. Detalle del CVE :...

wp2shell

wp2shell Ejecución remota de código pre-autenticación para WordPress 6.9.0–6.9.4 y 7.0.0–7.0.1. Encadena CVE-2026-63030 confusión de rutas batch SQLi con CVE-2026-60137 re-entrada de changeset del personalizador para lograr la creación de un administrador sin autenticación y la ejecución de...

ROS-20261005-73-0071

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the MariaDB database management system, related to the failure to take measures to neutralize special elements, allows attackers to execute arbitrary commands.

The vulnerability of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Kauth security subsystem of the DNScrypt-proxy-gui graphical interface allows a hacker to execute arbitrary commands.

The vulnerability of the Kauth security subsystem of the DNScrypt-proxy-gui graphical interface is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

PT-2026-106174

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...

The vulnerability of the pkg/machine/hyperv/stubber.go file of the OCI-container management and startup software Podman allows a attacker to execute arbitrary commands.

The vulnerability of the pkg/machine/hyperv/stubber.go file of the OCI-container management and startup software Podman is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

vsftpd 2.3.4 Backdoor Command Execution

vsftpd version 2.3.4 contains a backdoor command execution vulnerability. This submission documents identification and impact validation against Metasploitable 2 in an isolated lab...

TencentOS Server 2: sg3_utils (TSSA-2026:1086)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1086 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

ROS-20261005-73-0027

The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

ALSA-2026:75768 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RHEL 10 : vim (RHSA-2026:75769)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:75769 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in...

ALSA-2026:75769 Important: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVE-2026-73073 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...