637640 matches found
PunchingBag-for-React2Shell
🥊 PunchingBag — Платформа для исследований безопасности CVE-2025-55182 ⚠️ ТОЛЬКО В ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЯХ : Это намеренно уязвимое приложение, предназначенное для авторизованных исследований безопасности и CTF-задач. НЕ используйте эти методы на неавторизованных системах. Намеренно уязвимое...
tenda-hg10-rce
CVE-2026-1689 Краткое описание Уязвимость внедрения команд существует в маршрутизаторе Tenda HG10. Она возникает в конечной точке formLogin из-за некорректной обработки параметра Host. Проверка учетных данных не выполняется, поскольку уязвимость срабатывает до проверки. Пользовательский ввод из...
CVE-2026-89084
HP Advance software is affected by potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. The CVSS 4.0 base score is 8.8 (HIGH) , with a network attack vecto...
CVE-2026-89084 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...
EUVD-2026-81091
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...
CVE-2026-89083
HP Advance software contains potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, affecting the HP Advance server hosting the software. The CVSS 4.0 score is 9.3 (CRITICAL) , with a network attack vector requi...
EUVD-2026-81090
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...
CVE-2026-89082
CVE-2026-89082 affects HP Advance software running on the HP Advance server, with potential vulnerabilities enabling elevation of privilege , remote code execution , or arbitrary file write under certain conditions. The assigned CVSS 4.0 base score is 9.3 (CRITICAL) , with a network attack vector...
CVE-2026-89082 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
README.md CVE-2025-60787 Обнаружение: RCE в motionEye через внедрение конфигурации Неаутентифицированное удаленное выполнение кода в motionEye Неподвижные изображения - Имя файла изображения Пример PoC-полезной нагрузки: root@kitploit: $touch /tmp/test.%Y-%m-%d-%H-%M-%S Когда motion...
CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-
CVE-2026-22003 – Обход песочницы Redis Lua через debug.sethook Код программы триггер на Lua + Python root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end,...
CVE-2025-3248
Technical Analysis & Defensive Guide: CVE-2025-3248 Langflow Code Injection An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow. 📌 Vulnerability Profile CVE ID: CVE-2025-3248 Vulnerability Type: Remote Code Execution RCE /...
CVE-2024-2961-XXE-Exploit
CVE-2024-2961 CNEXT XXE 채널 적응 익스플로잇 스크립트 Ambionics 공식 cnext-exploits의 PHP 파일 읽기 - RCE 익스플로잇 스크립트를 SVG 업로드 + XXE 임의 파일 읽기 시나리오PolarisCTF 2026 "아바타 업로더" 유형 문제에 맞게 적응시킨 것입니다. 사전 조건 대상: Linux + glibc avatarname 업데이트 - 파싱 인터페이스 요청으로 에코백...
CVE-2026-5059-poc
Где в коде находится CVE-2026-5059? Уязвимость находится в двух файлах, работающих вместе: Файл 1: tools.py — Корневая причина В старой версии использовался shell=True в executepipedcommand: python СТАРЫЙ УЯЗВИМЫЙ КОД process = subprocess.run command, ← необработанная строка передаётся в shell...
CVE-2024-53677-POC
CVE-2024-53677 Старая добрая уязвимость, которая затрагивает Apache Struts и приводит к LFI и удалённому выполнению кода. Больше информации об уязвимости можно найти в этом отличном блоге. Обход пути в Apache Struts → RCE CVE-2024-53677 Использование POC Я потратил много времени, чтобы сделать эт...
DEBIAN-CVE-2026-91103
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
DEBIAN-CVE-2026-91106
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
DEBIAN-CVE-2026-91105
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91099
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
DEBIAN-CVE-2026-91097
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...