cve-2021-41773-v-

Apache httpd RCE Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría utilizar un ataque de path traversal para asignar URLs a archivos fuera de los directorios configurados mediante directivas similares a Alias. Si los archivo...

CVE-2023-47253

CVE-2023-47253 CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Prueba de Concepto POC Simplemente accede a la URL con tu código PHP en el parámetro "gridValoresPopHidden"...

Shellshock_vuln_Exploit

🚨 Эксплойт Shellshock RCE CVE-2014-6271 Это Python-эксплойт для уязвимости Shellshock CVE-2014-6271, которая затрагивает GNU Bash. Эксплойт нацелен на CGI-скрипты на уязвимых веб-серверах и устанавливает обратную оболочку reverse shell на машину атакующего. Идентификатор CVE CVE-2014-6271 Отказ о...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 ¿Cómo ejecutarlo? root@kitploit: php log4j.php https://1337.com Requisitos PHP CURL PAYLOAD DNS LOG Collaborator de Burpsuite o usa dnslog.cn Lista de Payloads root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId...

CVE-2019-19781

Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Control Inadecuado de Generación de Código 'Inyección de Código' Crítico 2024 Resumen CVE-2024-0195 es una vulnerabilidad crítica de inyección de código en la aplicación web spider-flow 0.4.3, específicamente en la función FunctionService.saveFunction del archivo...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit Este repositorio contiene un script de explotación en Python para el exploit del profesor malvado de Moodle CVE-2018-1133. Uso root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and...

CVE-2026-84838 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...

EUVD-2026-70108

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

CVE-2026-84837

A command injection vulnerability was identified in rpm , specifically in the gettarspec function used by rpmbuild -t*. The root cause is an unescaped tarball path or filename that, when containing shell metacharacters, allows an attacker to inject arbitrary commands. This is particularly relevan...

CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

CVE-2022-24086

CVE-2022-24086 Probado con: magento 2.4.3 y datos de ejemplo Imagen de Docker: docker.io/bitnami/magento:2.4.3-debian-10-r0 Nombre: root@kitploit: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2024-47533 - Cobbler XMLRPC Authentication Bypass RCE Exploit ⚠️ Critical Remote Code Execution via Authentication Bypass in Cobbler 🛠️ PoC implementation by @dollarboysushil 💡 Overview Cobbler, a Linux installation server that enables rapid setup of network installation environments, has an...

CVE-2024-24576-Exploit

CVE-2024-24576-Exploit The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

CVE-2022-26134

CVE-2022-26134 - Vulnerabilidad de inyección OGNL en Confluence Uso del script Instalar la biblioteca de Python pip install -r requirements.txt Verificación de la vulnerabilidad python3 CVE-2022-26134check.py -u url -c whoami Escaneo masivo python3 CVE-2022-26134check.py -f url.txt -c whoami...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

CVE-2024-27956-RCE-File-Package

CVE-2024-27956-RCE Paquete de archivos Contenido: 1. exploit.py Creador original:https://GitHub.com/diego-tella 2. modifiedexploit.py Modificado con una opción de ignorar la verificación SSL 3. Captura de pantalla 4. wpValvePressplugin.py Script de Python que utiliza parámetros URI para buscar el...

asrockploit

ejecución de código arbitrario con CVE-2020-15368...

CVE-2023-46604

CVE-2023-46604 Construir docker-compose que contenga 2 imágenes: la máquina víctima y la máquina objetivo según el entorno requerido En la máquina víctima, iniciar ActiveMQ Cambiar a la máquina atacante: • Abrir el servicio HTTP para enviar el PoC: python3 -m http.server • Usar netcat para escuch...