CVE-2022-39952

CVE-2022-39952 POC pour CVE-2022-39952 affectant Fortinet FortiNAC La configuration par défaut de cet exploit écrit une tâche cron pour créer un reverse shell. Assurez-vous de modifier le fichier payload pour l'adapter à votre environnement. Analyse Technique Une analyse technique des causes...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV: воспроизведение RCE с точным профилем и root-варианта Этот каталог — автономный комплект воспроизведения для авторизованной лаборатории: цепочка выполнения кода от ZendTo к ClamAV без учётной записи и её отдельное продолжение Smarty/root-cron на профиле по умолчанию. В...

redis-exploitation

redis-exploitation CONFIG SET Только в образовательных целях Сборка $ docker build -t victim . Запуск $ docker run -d --name victim victim Атака $ docker exec -it victim bash root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config set dir /var/spool/cron/ OK...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX SQLi pré-authentification vers RCE Un exploit tout-en-un pour CVE-2025-57819 , une injection SQL non authentifiée dans le module endpoint de FreePBX menant à une exécution de code à distance via injection de tâches cron. CVSS : 9.8 Critique —...

poc_monitor

pocmonitor Короткий скрапер, ищущий POC для CVE-2024-49112 Настройка cron-задания для запуска скрипта каждые 4 часа позволит поддерживать обновления. Оповещения можно настроить, но используется Discord webhook для уведомления в канал Discord. 0 /4 cd /root/monitorscript && /usr/bin/python3...

cve-2025-57819-exploit

CVE-2025-57819 Эксплойт Метаданные Критичность: Критический 9.8 Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Тип: Неаутентифицированная SQL-инъекция → Удалённое выполнение кода Затронутое ПО: FreePBX модуль endpoint 15.0.66, 16.0.89 и 17.0.3 Протестировано на: FreePBX 16.0.40.7 на CentOS ...

CVE-2025-57819-POC

CVE-2025-57819 — SQL-инъекция в FreePBX → RCE PoC CVE-2025-57819 — это критическая уязвимость SQL-инъекции в FreePBX, которая позволяет неаутентифицированному злоумышленнику добиться удалённого выполнения кода путём объединения SQL-инъекции с инъекцией cron-задач. ⚠️ Отказ от ответственности : Это...

CVE-2026-100715

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 deleteFtpData, queued when an FTP account is deleted, calls FileDir::makeCorrectDir without the $fixedhomedir argument, so the symlink component walk is skipped, a...

CVE-2026-100715 Froxlor before 2.3.12 Arbitrary File Deletion via Symlink

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 deleteFtpData, queued when an FTP account is deleted, calls FileDir::makeCorrectDir without the $fixedhomedir argument, so the symlink component walk is skipped, a...

CVE-2026-100580

OpenClaw npm package 'openclaw' before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a...

EUVD-2026-87471

OpenClaw npm package 'openclaw' before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a...

CVE-2026-100580 OpenClaw before 2026.7.1 Remote Code Execution via cron tool

OpenClaw npm package 'openclaw' before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a...

CVE-2026-100580 OpenClaw before 2026.7.1 Remote Code Execution via cron tool

OpenClaw npm package 'openclaw' before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-case payload kind can pass the agent-facing shell-execution guard and later normalize into a command job. An actor able to steer a tool-enabled agent can therefore create a...

CVE-2026-100580

The OpenClaw (npm package 'openclaw' ) before version 2026.7.1 contains a vulnerability where the model-facing cron tool improperly handles case sensitivity. A mixed-case payload kind can bypass the agent-facing shell-execution guard and be normalized into a command job. An actor capable of steer...

Cron Job Injection in Remote Backup

...

Langflow 1.8.4 Path Traversal / Remote Code Execution

Langflow versions 1.8.4 and below path traversal to remote code execution proof of concept exploit. Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link:...

Langflow 1.8.4 - Path Traversal to Remote Code Execution

Exploit Title: Langflow 1.8.4 - Path Traversal to Remote Code Execution Google Dork: N/A Date: 2026-07-20 Exploit Author: cardosource Vendor Homepage: https://www.langflow.org/ Software Link: https://github.com/langflow-ai/langflow Version: Dictstr, Any: return "target": target.rstrip'/', "lhost"...

linux-privesc-lab

linux-privesc-lab Linux Privilege Escalation Vulnerability...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX: From Unauthenticated SQL Injection to Root Shell...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...