nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE Crítico en NGINX CVSS 9.2 Clasificación Categoría: 0-Day / Ejecución Remota de Código CVE: CVE-2026-42945 CVSS: 9.2 Crítico Fecha de descubrimiento: 12 de mayo de 2026 Fecha de parche: Mayo de 2026 parche de seguridad trimestral de F5 Fuente: GitHub...

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC 英文 | 韩文 此仓库包含用于重现和研究 Next.js CVE-2025-66478 漏洞的概念验证 PoC。它由一个易受攻击的 Next.js 应用程序和一个用于测试漏洞的 Python 利用脚本组成。 什么是 CVE-2025-66478？ 这是一个在 Next.js Server Actions 处理过程中发生的远程代码执行 RCE 漏洞。 关键要点： 根本原因 ：RSC（React Server Components）Flight 协议中的不安全反序列化 。 攻击向量 ：通过 proto 属性进行原型污染 。 漏洞摘要...

CVE-2025-55182-in-go

CVE-2025-55182 — RCE en React Server Components Exploit para RCE en React Server Components mediante contaminación de prototipos. Uso root@kitploit: go run main.go -t -c Ejemplos root@kitploit: go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.g...

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – Desbordamiento de montón en el paquete CONNECT de broker MQTT Código del programa C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; /...

CVE-2024-21513

CVE-2024-21513 PoC para CVE-2024-21513 Exploit original documentado por Snyk Security Research Exploit CVE-2024-21513 es una vulnerabilidad en langchain-experimental donde los resultados no validados de consultas SQL se pasaban a eval de Python, permitiendo la ejecución remota de código mediante...

CVE-2020-5902

CVE-2020-5902 root@kitploit: / \ \ / / | | \ / \ \ / \ | / \ / \ \ | | \ \ / /| | | | | | | | | || || | | | | | | | \ / / | |/ /| | | |/ /| | | || \, | | | |/ / | | \ / | | / /| || / /| || | | / /| || / / | / || ||/|/ |/ // /| CVE-2020-5902-Scanner.py @nsflabs La interfaz de usuario de...

CVE-2026-52885

TOCTOU: Verificación HMAC en Disco, Ejecuta desde Memoria Notepad++ v8.9.6.2 — Ejecución de Comandos de Usuario Controlados por Atacante mediante Condición de Carrera HMAC Aviso...

CVE-2018-16763

CVE-2018-16763 CVE-2018-16763 FuelCMS 1.4 Ejecución Remota de Código, esta versión de FuelCMS sigue siendo vulnerable hasta ahora...

CVE-2019-18935

CVE-2019-18935 Exploit de prueba de concepto para una vulnerabilidad de deserialización JSON en .NET en Telerik UI para ASP.NET AJAX que permite la ejecución remota de código. Descripción Telerik UI para ASP.NET AJAX es un conjunto ampliamente utilizado de componentes de interfaz de usuario para...

CVE-2026-48030

CVE-2026-48030 — Inyección de comandos del sistema operativo en Pheditor Resumen...

EUVD-2026-79014

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79005

In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58710

CVE-2026-58710 is an out-of-bounds write in DecodeFilmGrainParams of film_grain_dec.cc in Google Pixel devices, caused by a missing bounds check . It enables remote code execution with low privileges and no user interaction. The Pixel Security Bulletin classifies it under the BigOcean subcomponen...

EUVD-2026-78998

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57035

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...