CVE-2023-22809

CVE-2023-22809 CVE-2023-22809 هي ثغرة أمنية حرجة تؤثر على برنامج sudo الشهير، وتحديدًا الأمر sudoedit. تسمح هذه الثغرة للمهاجم بالحصول على صلاحيات الجذر root على النظام المستهدف عن طريق استغلال خلل موجود في الأمر sudoedit. يتضمن استغلال ثغرة CVE-2023-22809 تمرير وسيط مُعد خصيصًا للأمر sudoedit...

Safer_PoC_CVE-2022-22965

SaferPoCCVE-2022-22965 إثبات مفهوم أكثر أمانًا لـ CVE-2022-22965 Spring4Shell الوظائف ينشئ ملفًا باسم CVE2022-22965exploited.txt في دليل tomcat 'webapps/ROOT' وسيطة اختيارية للمستخدم لتغيير دليل الإخراج يتم التحقق من الاستغلال عن طريق طلب ملف النص الناتج، واعتمادًا على تكوين tomcat الخاص بك قد...

shakeitoff

shakeitoff نسخة أصغر وأقل حجماً وأنظف من InstallerFileTakeOver المعروف أيضًا باسم الثغرة ذات اليوم الصفر والتي هي "اختلاف" عن CVE-2021-41379 والتي تم تخصيصها لاحقًا CVE-2021-43883. هذه النسخة لا تفتح شيل مثل InstallerFileTakeOver. الهدف من هذا الكود هو إنشاء برهان مفهوم أبسط وأكثر موثوقية لإظهار...

CVE-2026-65891

CVE-2026-65891 — Joomla JCE Rename PoC Scanner proof-of-concept per CVE-2026-65891 nell'estensione Joomla Content Editor JCE. La convalida inadeguata dell'input nella funzione rename del file manager JCE consente a un utente autenticato con permessi di gestione file di: creare file nascosti nomi...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

CVE-2024-3400-Palo-Alto-OS-Command-Injection

Passaggi : 1. Verificare se il file 0xr2r.txt è presente sul dispositivo eseguendo la seguente richiesta GET oppure possiamo verificarlo aprendo https://domain.com/global-protect/portal/images/0xr2r.txt URL nel browser se ricevi una risposta 404 significa che il file non è presente. root@kitploit...

CVE-2024-10586-Poc

Informazioni sulla Vulnerabilità Descrizione Il plugin Debug Tool per WordPress è vulnerabile alla creazione arbitraria di file a causa di una mancanza di controllo delle capacità sulla funzione dbtpullimage e della mancata validazione del tipo di file in tutte le versioni fino alla 2.2 inclusa...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Creazione Arbitraria di File Non Autenticata Descrizione: Il plugin Debug Tool per WordPress è vulnerabile alla creazione arbitraria di file a causa della mancanza di un controllo delle capacità nella funzione dbtpullimage e della mancanza di validazione del tipo...

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 अंतिम संस्करण - पैच नहीं किया गया Github project : https://github.com/trippo/ResponsiveFilemanager आवश्यकताएँ: कुछ भी आवश्यक नहीं है, यह एक्सप्लॉइट अप्रमाणित है। रिस्पॉन्सिव फ़ाइलमैनेजर एप्लिकेशन एक वेब-आधारित फ़ाइल प्रबंधन उपकरण है जिसका...

CVE-2017-11783

CVE-2017-11783 1day-Exploit von sheisback Es ist kein vollständiger Exploit führt cmd mit Systemrechten aus, er erstellt nur eine Datei in system32. Also musst du das vervollständigen, du benötigst die consent.exe-UAC-Technik. Referenz Ein Blick in ALPC-RPC von Clément Rouault & Thomas Imbert, 20...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 Dieses Repository enthält einen Proof-of-Concept-Exploit für das GPX-Viewer-Plugin für WordPress, das anfällig für die Erstellung beliebiger Dateien CVE-2024-10629 ist. Die Schwachstelle erlaubt authentifizierten Angreifern mit Subscriber-Zugriff und höher,...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: OverlayFS में विशेषाधिकार उन्नयन भेद्यता 🛡️ OverlayFS में Linux कर्नेल की विशेषाधिकार उन्नयन भेद्यता के लिए सुरक्षा सलाह और शमन मार्गदर्शिका। अवलोकन CVE-2022-0944 Linux कर्नेल के OverlayFS सबसिस्टम में एक सुरक्षा भेद्यता है जो स्थानीय हमलावरों को विशिष्ट कॉन्फ़िगरेशन में फ़ाइल...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerabile a CVE-2022-46604 bypass dell'estensione di creazione file che porta a RCE. L'attuale exploit è scritto in Python 3 e sfrutta la vulnerabilità per caricare una webshell che consente l'esecuzione remota dei comandi...

CVE-2020-9484

Vulnerabilità di deserializzazione Apache Tomcat CVE-2020-9484 Configurazione del target vulnerabile Clona questo repository Esegui docker-compose up -d Tutto qui! POC dell'exploit Esegui curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx Viene...

cve-2024-3400

cve-2024-3400 Script Python di exploit e verifica per CVE-2024-3400: iniezione di comandi e creazione arbitraria di file su Palo Alto root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules...

CVE-2014-7911poc

CVE-2014-7911 POC para CVE-2014-7911 para Nexus5 Android 4.4.4r1 baseado no retme7 e auo, usa uma rop chain diferente Informação Uso lance este poc, clique no botão “CVE-2014-7911”, você verá um pwn.txt criado pelo usuário system em /data:...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2023-28252-

CVE-2023-28252- Erkennung des Exploits CVE-2023-28252. Überwachung der Dateierstellung in dem Verzeichnis, in dem der Exploit die für die Ausnutzung verwendeten Dateien hinterlässt, auf dem festen Pfad im Ordner "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" und...

WordPress Breeze Cache plugin < 2.5.13 - Unauthenticated Limited File Creation vulnerability

Unauthenticated Limited File Creation vulnerability discovered by Jakub Herman in WordPress Plugin Breeze versions 2.5.13...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...