CVE-2026-76694

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

CVE-2026-76690

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76691

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-76685

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2026-76689

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-76687

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges o...

CVE-2026-76682

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76683

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

CVE-2026-76674

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

CVE-2026-76678

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on th...

CVE-2026-76676

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...

CVE-2026-51133

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

CVE-2022-1329

WordPress插件 - Elementor 3.6.0 3.6.1 3.6.2 远程代码执行 root@kitploit: 日期: 2023年4月16日 漏洞利用作者: Việt Hùng https://github.com/phanthibichtram12 供应商主页: https://elementor.com/ 软件链接: https://wordpress.org/plugins/elementor/advanced/ 向下滚动选择版本 版本: 3.6.0, 3.6.1, 3.62 测试环境: WordPress 5.9.3 不依赖操作系统，因为此漏洞利用不提供有效载荷...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自动Shell上传 WordPress Royal Elementor 1.3.78 Shell上传 访问 https://phankz.com...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - 远程代码执行 RCE 已验证 root@kitploit: 日期：2023年11月5日 利用作者：Việt HÙng https://github.com/phanthibichtram12 供应商主页：https://www.wpallimport.com/ 软件链接：https://wordpress.org/plugins/wp-all-import/advanced/ 向下滚动选择版本 版本：= 3.6.7 已测试：3.6.7 测试环境：WordPress 6.1 不依赖操作系统，因为此利用不提供载...

CVE-2025-2783

Chromium CVE-2025-2783：沙盒逃逸与全链远程代码执行利用 本仓库包含了 CVE-2025-2783 的完整利用链实现。该漏洞存在于 Chromium 的 Ipcz 通信层，允许攻击者从受限的渲染器进程中实现沙盒逃逸和任意代码执行。该利用支持 134.0.6998.177 及之前的版本。 https://github.com/user-attachments/assets/a3e2bf34-739c-4db7-9101-0f4d48987ad0 1. 项目结构 src/ ：核心利用实现。包含针对 CVE-2025-2783 的 Ipcz 劫持逻辑、V8...

RCE-Exploit-Framework

RCE-Exploit-Framework Este framework está diseñado para ayudar a pentesters o desarrolladores a comprender los mecanismos de explotación de ejecución remota de código RCE. Características Generador de Payloads : Admite la creación de payloads personalizados basados en Python, Bash y PHP. Ejecutor...

Oracle-WebLogic-CVE-2017-10271

Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 漏洞描述 早期，黑客利用WebLogic WLS 组件漏洞对企业服务器发起大范围远程攻击，有大量企业的服务器被攻陷，且被攻击企业数量呈现明显上升趋势，需要引起高度重视。其中，CVE-2017-3506是一个利用Oracle WebLogic中WLS 组件的远程代码执行漏洞，属于没有公开细节的野外利用漏洞，大量企业尚未及时安装补丁。官方在 2017 年 4 月份就发布了该漏洞的补丁。 CVE-2017-3506补丁说明： root@kitploit:...

CVE-2026-5027-Langflow

CVE-2026-5027 和 CVE-2026-10520 CVE-2026-25089 利用工具： 克隆 root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow 使用 exploit.py 文件 自动测试和利用。 root@kitploit: python3 exploit.py -u https://target.com CLI 自定义设置 当 webshell 位于文件夹内时使用自己的 webshell：...

CVE-2026-60004-PoC

CVE-2026-60004: Ejecución remota de código en la API Diffpatch de Gitea !WARNING Este repositorio está destinado exclusivamente a la investigación de seguridad autorizada y a pruebas de laboratorio controladas. No ejecute la prueba de concepto contra sistemas que no posea o para los que no tenga...