Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Parametro Comando CVE-2022-1388 è una vulnerabilità di bypass dell'autenticazione nel componente REST dell'API iControl di BIG-IP a cui è stato assegnato un punteggio CVSSv3 di 9.8. L'API REST iControl è utilizzata per la gestione ...

CVE-2021-25646-exp

CVE-2021-25646-exp Apache Druid CVE-2021-25646 strumento di rilevamento e sfruttamento della vulnerabilità di esecuzione remota di codice Inserisci dominio o IP:porta per eseguire la scansione della vulnerabilità Per i target vulnerabili, è possibile sfruttare l'esecuzione di comandi Supporta...

CVE-2022-31491

CVE-2022-31491 Metasploit-Modul und PoC-Dateien in diesem Repository. Weitere Informationen Voltronic Viewpower/Pro und Rebrands/Abwandlungen Die UPS-Verwaltungssoftware ermöglicht es einem ordnungsgemäß authentifizierten und autorisierten Benutzer normalerweise, über eine Weboberfläche das Syste...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 एक्सप्लॉइट ⚠️ अस्वीकरण - केवल शैक्षणिक उपयोग यह एक्सप्लॉइट केवल अधिकृत पैठ परीक्षण penetration testing और शैक्षणिक उद्देश्यों के लिए है। कंप्यूटर सिस्टम तक अनधिकृत पहुंच अवैध है। लेखक किसी भी दुरुपयोग के लिए जिम्मेदार नहीं है। 📋 अवलोकन CVE-2021-22911 Rocket.Chat में एक...

idasec

idasec IDA-Plugin für Reverse Engineering und dynamische Interaktionen mit der Binsec-Plattform Disclaimer IDAsec ist ein Prototyp-Tool in der Entwicklung, einige Funktionen sind wahrscheinlich fehlerhaft und sollten mit Vorsicht verwendet werden. Features Dekodieren einer Instruktion in DBA IR...

CVE-2022-46649

CVE-2022-46649 PoC-Exploit für CVE-2022-46649, eine Befehlsinjektions-Schwachstelle im Endpunkt /cgi-bin/iplogging.cgi. Die Schwachstelle ermöglicht authentifizierten Angreifern die Ausführung beliebiger Betriebssystembefehle über manipulierte tcpdumpParams. Übersicht Schwachstelle: OS Command...

CVE-2024-6387

CVE-2024-6387.py - PoC Wichtige Hinweise!!! Der Exploit funktioniert NUR für 32-Bit-OpenSSH-Server. Das liegt daran, dass der PoC 32-Bit-Zeiger verwendet! Es ist außerdem bekannt, dass einige Versionen bereits gepatcht sind und nicht jeder Server verwundbar ist. Getestet auf: Kali Linux, ParrotSe...

CVE-2026-76797

The MongoSQL Transition Readiness Tool (MongoDB) is vulnerable to CSV injection through its generated reports. Database and collection names are written into CSV output without neutralizing leading characters that spreadsheet applications interpret as formulas. An attacker with write privileges o...

Web-Security-Learning

Web-Security-Learning Endereço do projeto: https://github.com/CHYbeta/Web-Security-Learning Planeta do conhecimento Vulnerabilidades e Ataques: https://t.zsxq.com/mm2zBeq Índice: Web-Security-Learning Web Security Injeção SQL MySql MSSQL PostgreSQL MongoDB Técnicas Ferramentas XSS CSRF Outras...

CVE-RCE

Questo repository non contiene un README...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Descrizione Vulnerabilità di esecuzione remota di codice non autorizzata in Confluence : CVE-2022-26134 Confluence è un wiki aziendale basato sul web sviluppato dalla società australiana di software Atlassian. Il 2 giugno 2022, Atlassian ha pubblicato un advisory di...

windows-kernel-exploits

windows-kernel-exploits Introduzione windows-kernel-exploits Elenco delle vulnerabilità Security Bulletin KB Descrizione Sistema Operativo CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerabilit...

cve-2022-28944

CVE-2022-28944 Vulnerabilidade de Execução Remota de Código sem Autenticação em Atualização de Múltiplos Produtos do EMCO Software. Uso: python3 cve-2022-28944poc.py Detalhes no relatório em gerr.re. Passos para reproduzir 1. Instale um produto afetado do EMCO Software; 2. Defina o spoof...

cve-2024-4577

cve-2024-4577 poc Auf Schwachstellen prüfen python cve-2024-4577.py -u http://172.16.128.133 Nachdem eine Schwachstelle erkannt wurde, können Sie mit -c einen benutzerdefinierten Befehl ausführen python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...

GHSA-9X44-4GXF-8C25 Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Upload Irrestrito de Arquivo → RCE Vulnerabilidade Crítica de Upload Irrestrito de Arquivo no Elementor Pro Potencialmente levando à Execução Remota de Código RCE ⚠️ Visão Geral CVE-2026-32475 é uma vulnerabilidade de segurança crítica que afeta o Elementor Pro , u...

EUVD-2026-67871

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-55634

Pimcore, an open-source Data & Experience Management Platform, is vulnerable to Remote Code Execution via its class-definition import endpoint. Prior to versions 11.5.19, 12.3.10, and 2026.1.6, a DataObject field name is emitted without an identifier allowlist into generated PHP properties (Field...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...