CVE-2025-48384

CVE-2025-48384: Quebrando o git com um carriage return e clonagem RCE Reprodução de https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. Todos os créditos para David Leadbeater. Esta é uma tentativa básica de reprodução da vulnerabilidade. Para acionar, execute git clone --recursive...

CVE-2022-1329-WordPress-Elementor-RCE

CVE-2022-1329-WordPress-Elementor-RCE यह poc AkuCyberSec के poc पर आधारित है। 中文版本 उपयोग कमजोर वातावरण शुरू करने के लिए docker-compose का उपयोग करें: root@kitploit: docker-compose up -d फिर आप URL http://localhost:8000 के साथ WordPress एडमिन पेज तक पहुँच सकते हैं। एडमिन उपयोगकर्ता को पंजीकृत करें...

CVE-2020-14882

CVE-2020–14882 WebLogic Bypass de Autenticação RCE bypass do patch com CVE-2020–14882 private static final String IllegalUrl = new String";", "%252E%252E", "%2E%2E", "..", "%3C", "%3E", ""; lista root@kitploit: %252E%252E %2E%2E .. %3E %3C ; minúsculas root@kitploit: "%252E%252E%252F".lower...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 Struts 2 S2-053CVE-2017-12611 के लिए RCE शोषण का एक सरल स्क्रिप्ट उपयोग root@kitploit: exploit.py उदाहरण root@kitploit: $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

Follina_Exploiter_CLI

Ferramenta CLI Follina Exploiter para Vulnerabilidade MSDT CVE-2022-30190 Uma ferramenta Python baseada em linha de comando para explorar a vulnerabilidade Zero-Day no MSDT Microsoft Support Diagnostic Tool também conhecida como 'Follina' CVE-2022-30190. Informação: New Microsoft Office zero-day...

CVE-2017-3881-exploit-cisco-

सिस्को क्लस्टर मैनेजमेंट प्रोटोकॉल CMP प्रोसेसिंग कोड में एक कमजोरी सिस्को IOS और सिस्को IOS XE सॉफ़्टवेयर में एक अप्रमाणित, दूरस्थ हमलावर को प्रभावित डिवाइस को रीलोड करने या उच्च विशेषाधिकारों के साथ दूरस्थ रूप से कोड निष्पादित करने की अनुमति दे सकती है। क्लस्टर मैनेजमेंट प्रोटोकॉल क्लस्टर सदस्य...

EUVD-2026-67941

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

EUVD-2026-67944

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

EUVD-2026-67956

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint...

EUVD-2026-67958

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from...

EUVD-2026-67952

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

EUVD-2026-67953

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication...

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - ثغرة RCE قبل المصادقة في Confluence | حقن OGNL تحميل سكربت PoC root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 تشغيل الاستغلال root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 Explorações do CVE-2021-38003 extraídas de https://twitter.com/WhichbufferArda/status/1609604183535284224...

cve-2019-6453-poc

CVE-2019-6453: कस्टम URI प्रोटोकॉल हैंडलर के माध्यम से तर्क इंजेक्शन का उपयोग करके mIRC 7.55 पर RCE हमने irc:// URI प्रोटोकॉल हैंडलर के माध्यम से mIRC में एक रिमोट कोड निष्पादन भेद्यता पाई। क्योंकि mIRC तर्क सूची के अंत को चिह्नित करने के लिए -- जैसे किसी भी सिगिल का उपयोग नहीं करता है, एक हमलावर...

CVE-2022-0540-RCE

RCE de Bypass de Autenticação no Atlassian Jira Seraph（CVE-2022-0540） Inglês • 中文 Detalhes do Exploit Conforme visto no blog do autor, a Atlassian forneceu uma longa lista de plugins afetados a grande maioria dos quais eram falsos positivos, e o autor listou vários plugins realmente afetados De...

DaaC2

DaaC2 - Discord como um C2 Escrevi isso porque estava entediado e queria brincar com um bot do Discord, ver se conseguia construir uma linha de comunicação entre um servidor C2 e um agente via Discord. Acontece que funciona muito bem. Idealmente, com mais tempo, eu usaria isso como um dropper...

through_the_wire

Through the Wire Through the Wire é um exploit de prova de conceito para CVE-2022-26134, uma vulnerabilidade de injeção OGNL que afeta o Atlassian Confluence Server e Data Center versões = 7.13.6 LTS e = 7.18.0 "Latest". Originalmente, era um zero-day explorado na natureza. Comunicado do forneced...

through_the_wire

Through the Wire Through the Wire is a proof of concept exploit for CVE-2022-26134, an OGNL injection vulnerability affecting Atlassian Confluence Server and Data Center versions = 7.13.6 LTS and = 7.18.0 "Latest". This was originally a zero-day exploited in-the-wild. Vendor advisory Volexity...

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Injeção de Comandos do Sistema Operacional sem Autenticação /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Descobridor : Daniil Gordeev Divulgado : 2026-05-03 Resumo O servidor web GoAhead incluído nos dispositivos CPE 4G LTE...