CVE-2022-39952

CVE-2022-39952 PoC для CVE-2022-39952, затрагивающей Fortinet FortiNAC Конфигурация по умолчанию данного эксплойта создает задачу cron для организации обратной оболочки. Обязательно измените файл payload под ваше окружение. Технический анализ Технический анализ первопричины уязвимости и индикатор...

poc_monitor

pocmonitor Короткий скрапер, ищущий POC для CVE-2024-49112 Настройка cron-задания для запуска скрипта каждые 4 часа позволит поддерживать обновления. Оповещения можно настроить, но используется Discord webhook для уведомления в канал Discord. 0 /4 cd /root/monitorscript && /usr/bin/python3...

cve-2025-57819-exploit

CVE-2025-57819 익스플로잇 메타데이터 심각도: 치명적 9.8 벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 유형: 인증되지 않은 SQL 인젝션 → 원격 코드 실행 영향받는 소프트웨어: FreePBX endpoint 모듈 매개변수 : 대상 호스트명 또는 IP 주소 취약한 FreePBX 인스턴스 : 리버스 쉘 콜백을 위한 공격자 IP 주소 : 수신 연결을 위한 리스닝 포트 예시: root@kitploit: python3 cve-2025-57819.py freepbx.local...

CVE-2025-57819-POC

CVE-2025-57819 — FreePBX SQL 주입 → RCE PoC CVE-2025-57819 은 FreePBX의 치명적인 SQL 주입 취약점으로, 인증되지 않은 공격자가 SQL 주입과 크론 작업 주입을 연계하여 원격 코드 실행을 달성할 수 있게 합니다. ⚠️ 면책 조항 : 이 저장소는 승인된 보안 테스트 및 교육 목적으로만 제공됩니다. 소유하지 않았거나 명시적 테스트 권한이 없는 시스템에 이 익스플로잇을 무단 사용하는 것은 불법입니다. 작성자는 어떠한 오용 또는 손해에 대해 책임을 지지 않습니다. 취약점 개요...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV 정밀 프로파일 RCE 및 root 변종 재현 이 디렉터리는 무계정 ZendTo-to-ClamAV 코드 실행 체인과 별도의 기본 프로파일 Smarty/root-cron 연속 단계를 위한 독립형 인증 랩 재현 번들입니다. 포함 내용: 실행 가능한 PoC 의존성 클로저 전체; Docker 대상 토폴로지 구축용 스크립트 및 출처 기록; 테스트된 systemd/socket 수명 주기와 일치하는 Docker Compose 정의; 실패 시 차단fail-closed 방식의 이미지, 패키지, 바이너리,...

redis-exploitation

redis-exploitation CONFIG SET 교육 목적으로만 사용 빌드 root@kitploit: $ docker build -t victim . 실행 root@kitploit: $ docker run -d --name victim victim 공격 root@kitploit: $ docker exec -it victim bash root@kitploit: root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX: неаутентифицированный SQLi до RCE Универсальный эксплойт для CVE-2025-57819 , неаутентифицированная SQL-инъекция в модуле endpoint FreePBX, которая приводит к удаленному выполнению кода через внедрение задачи cron. CVSS : 9.8 Критический —...

Cron Job Injection in Remote Backup

...

Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: Dictstr, Any: return "target": target.rstrip'/', "lhost"...

Langflow 1.8.4 Path Traversal / Remote Code Execution

Langflow versions 1.8.4 and below path traversal to remote code execution proof of concept exploit. Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link:...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX: From Unauthenticated SQL Injection to Root Shell...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

CVE-2026-72607 Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...

PT-2026-70153

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = items batchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...

CVE-2026-72590 alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

Redis-RCE-x-HTB

Redis RCE Toolkit Educational / Authorized Lab Use Only...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-5...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

GHSA-XRCF-6JH3-GGVX Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode

Summary Anyquery's server mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the ATTACH DATABASE command to write arbitrary SQLite databases to any path on the victim's filesystem where the...

PT-2026-60080

Name of the Vulnerable Software and Affected Versions Anyquery affected versions not specified Description When running in server mode, the software fails to restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the...