CVE-2021-38647-POC-and-Demo-environment

Подробности OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, ранее известная как NanoWBEM — это сервер управления с открытым исходным кодом, реализующий модель Common Information Model CIM от Microsoft и The Open Group. OMI — программный агент, присутствующий на большинстве...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Обнаружение уязвимости USAGE python MS15-034.py www.xxx.com:80 Тестовая программа Уязвимость удалённого выполнения кода в HTTP.sys CVE-2015-1635, MS15-034 Уязвимость удалённого выполнения кода существует в стеке протокола HTTP HTTP.sys и возникает, когда...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Доказательство-концепции В pki-core обнаружена ошибка. Доступ к внешним сущностям при разборе XML-документов может привести к атакам типа XML External Entity XXE. Эта уязвимость позволяет удалённому атакующему потенциально извлекать содержимое произвольных файлов, отправляя специаль...

RCE_CVE-2024-7954-

RCECVE-2024-7954- Le plugin porteplume utilisé par SPIP avant les versions 4.30-alpha2, 4.2.13 et 4.1.16 est vulnérable à une exécution de code arbitraire. Un attaquant distant non authentifié peut exécuter du PHP arbitraire en tant qu'utilisateur SPIP en envoyant une requête HTTP malveillante...

CVE-2020-5902-Vuln-Checker

Проверка уязвимости CVE-2020-5902 N|Solid Изучая эту уязвимость вместе с коллегами-исследователями, мы пришли к выводу, что большинство существующих способов проверки данной уязвимости можно отнести к формам компрометации системы. Мы хотели разработать способ проверки уязвимости, который не стави...

CVE-2025-0108-Authentication-Bypass-checker

Cet outil teste si un appareil PAN-OS cible est vulnérable à la vulnérabilité de contournement d'authentification CVE-2025-0108. Il envoie une requête HTTP spécialement conçue à la cible et analyse la réponse pour déterminer si l'appareil est exploitable. Utilisation IP unique python...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Запустите эксплойт python3 exploit.py...

CVE-2026-21962

🚨 CVE-2026-21962 - Критическая уязвимость обхода аутентификации 🧾 Сводка 🔥 Уязвимость максимальной степени критичности 10.0 , позволяющая получить удаленный доступ без аутентификации к системам Oracle Middleware. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner 원격 공격자는 인증 없이 WebLogic Server Console을 장악하기 위해 특수한 HTTP 요청을 구성할 수 있습니다. 설치 및 사용법 git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd CVE-2020-14883.exe 영향받는 버전 Oracle WebLogic Server 버전 10.3.6.0 Oracle...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Эксплуатация уязвимости удаленного выполнения кода CVE-2024-7954 Проект тестирования уязвимостей программного обеспечения Представлено: Shivansh Kuntal Обзор Этот проект демонстрирует эксплуатацию CVE-2024-7954 , критической уязвимости удаленного выполнения кода RCE, затрагивающей SPIP CMS через...

EUVD-2026-88166

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service DoS condition...

EUVD-2025-210998

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...

Cisco Identity Services Engine (cisco-sa-ise-multi-hrP9jQSQ)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web...

Fortinet Fortigate Null Pointer Dereference in Log Report (FG-IR-26-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all...

Cisco Identity Services Engine (cisco-sa-ise-rce-se7bYU57)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1869:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1869:01 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the...

CVE-2026-76438

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

CVE-2026-20285

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...

CVE-2026-76438 Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could...