RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...

routers-exploit

Repo OpenSource con PoCs y vulnerabilidades encontradas en routers TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS CVE-2020-9374 - TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS root@kitploit: Payload: "$ls" TP LINK TL-WR849N - Bypass de autenticación: actualización de firmware y...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP 服务器 2.4.49 路径遍历 / 远程代码执行 教育研究项目。 所有测试均在隔离的 Docker 实验室中进行。请勿用于您并不拥有的任何系统。 漏洞总结...

CVE-2024-54152

⚙️🔨 EN PROGRESO CVE-2024-54152 POC Angular Expressions proporciona expresiones para el framework web Angular.JS como un módulo independiente. Antes de la versión 1.4.3, un atacante puede escribir una expresión maliciosa que escapa del sandbox para ejecutar código arbitrario en el sistema. Con un...

CVE-2023-4220-PoC

CVE-2023-4220 Subida Arbitraria de Archivos / RCE - PoC Creé este script para automatizar la explotación de CVE-2023-4220 y obtener una reverse shell en la máquina PermX de Hack The Box. Esta vulnerabilidad afecta a Chamilo LMS versiones ≤ 1.11.24 , debido a una validación insuficiente en la...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 漏洞测试工具 针对 CVE-2023-33177 的自动化安全测试工具——Xibo CMS 中的 Zip Slip 路径遍历漏洞，可导致远程代码执行（RCE）。 ⚠️ 免责声明 此工具仅用于教育和授权测试目的。 仅在您拥有或已获得明确许可的系统上使用。 未经授权的测试是非法且不道德的。 📋 描述 Xibo CMS 版本 1.8.0-2.3.16 和 3.0.0-3.3.4 在布局导入功能中存在路径遍历攻击漏洞。本工具通过尝试写入一个无害的测试文件，安全地检测您的 Xibo 实例是否存在漏洞。 漏洞详情 CVE ID :...

CVE-2026-93337 NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...

EUVD-2026-82381

NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit...

CVE-2026-93337 NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...

CVE-2026-93337

NetworkManager-l2tp contains an improper input validation vulnerability in its handling of mru or mtu property values. A local user with VPN connection creation permissions can inject trailing non-numeric content after a valid integer, which is written verbatim into the pppd options file via writ...

CVE-2026-93337 NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit...

CVE-2025-55182-TOOLS

CVE-2025-55182 漏洞利用工具 CVE-2025-55182 综合利用/检测工具 由明一安全实验室 开发 功能 漏洞检测 : 批量扫描多个目标以发现漏洞 路径扫描 : 扫描常见的 Server Action 端点以发现易受攻击的路径 远程代码执行 : 在易受攻击的目标上执行系统命令 多种利用方法 : V1: vmrunInThisContext - 经典 RCE 方法 V2: $@ Chunk.prototype.then - Next.js 16.0.6+ 的高级 POC 安装 root@kitploit: go build -o cve-tool main.go 用法...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ 法律/道德声明：此脚本仅用于授权环境 ✅（CTF、实验室、经过许可的渗透测试）。请勿在未经授权的系统上使用 ❌。 🧾 此脚本功能是什么？ exploitgreenhorn.py 自动化了针对 Web 面板的典型漏洞利用链： ✅ 登录面板（需要有效密码） ✅ 在内存中创建 ZIP（不写本地文件）📦 ✅ 将包含反向 shell 的 rev.php 放入其中 🔁🐚 ✅ 将 ZIP 作为“模块”上传到面板 🧩⬆️ ✅ 通过访问已上传的 PHP URL 触发 payload 🚀 📌 模块名随机生成以避免冲突（例如：abcdefg、xqpmzui 等）🎲 🧰 环境要求...

CVE-2026-54239

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

DEBIAN-CVE-2026-52727

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-47252

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled UR...

CVE-2026-19477

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

Drupalgeddon2-CVE-2018-7600

🔥 Drupalgeddon 2 漏洞利用工具 — bixi.py 📖 简介 bixi.py 是一个针对 CVE‑2018‑7600 Drupalgeddon 2 漏洞的利用工具，该漏洞影响 Drupal 7 。 它通过直观的界面和预定义命令，实现对易受攻击的 Drupal 服务器的远程命令执行 RCE。 ⚠️ 免责声明 / 法律声明 本软件仅用于受控环境下的教育和研究目的。 仅允许在您拥有或获得书面许可的系统上使用 未经授权的使用是非法的 ，可能导致刑事后果 作者不对本工具的滥用行为承担任何责任 请始终遵守当地和国际网络安全法律法规 "能力越大，责任越大" 📋 功能特点 ✅ 自动利用...

EUVD-2026-82379

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...

CVE-2026-92993 Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection

A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...