CVE-2026-82597

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-82598

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument searchtype causes code injection. It is possible to initiate the attack remotely. The exploit has been publicly disclose...

CVE-2026-77956

Improper Control of Generation of Code Code Injection vulnerability in ash-project ashai allows a remote, unauthenticated client to execute arbitrary Elixir code. AshAi.Actions.Prompt evaluates prompt content through EEx.evalstring/2. The documented prompt: fn input, context - ... end form lets t...

CVE-2026-63030-wp2r00t

wp2r00t - PoC de Inyección SQL Ciega por Confusión de Rutas en el Endpoint Batch de WordPress Una prueba de concepto autónoma para la inyección SQL ciega no autenticada alcanzable a través del endpoint batch REST de WordPress /wp-json/batch/v1. Es una implementación independiente construida a...

CVE-2025-9491_POC

CVE-2025-9491 LNK Obfuscation PoC A proof-of-concept tool for demonstrating the Windows Shortcut LNK file vulnerability ZDI-CAN-25373/CVE-2025-9491. This tool showcases how malicious command-line arguments can be hidden within .lnk files by leveraging whitespace character padding. This tool is...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept PoC for CVE-2025-8110, a Remote Code Execution RCE vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration. Usage To run t...

CVE-2025-54322

CVE-2025-54322 - Escáner de RCE Pre-Auth para XSpeeder SXZOS Un escáner de vulnerabilidades multihilo para CVE-2025-54322, una vulnerabilidad de ejecución remota de código no autenticada en el firmware XSpeeder SXZOS que afecta a más de 70.000 hosts a nivel mundial. 📋 Tabla de Contenidos Acerca d...

microctfs

microctfs Pequeños desafíos CTF ejecutándose en Docker logviewer Construir e iniciar el desafío logviewer expuesto en el puerto 8000 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Reiniciar el desafío logviewer root@kitploit: docker ...

CVE-2022-42045

CVE-2022-42045 Summary We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges local...

EUVD-2026-68307

Loop with Unreachable Exit Condition Infinite Loop vulnerability in ash-project ashai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls through...

CVE-2026-82579 AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Loop with Unreachable Exit Condition Infinite Loop vulnerability in ash-project ashai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :toolcalls, then filters the calls through...

wp2shell-poc2

wp2shell-poc Prueba de concepto para una inyección SQL no autenticada en el núcleo de WordPress que encadena a ejecución remota de código, mediante confusión de ruta en el endpoint REST batch CVE-2026-63030. El exploit no requiere credenciales ni configuración más allá de un objetivo accesible...

wp2shell

wp2shell por: ek0ms savi0r Ejecución remota de código no autenticada para WordPress Core POC CVE-2026-63030 + CVE-2026-60137 wp2shell es un exploit para una cadena de vulnerabilidades críticas en el núcleo de WordPress. Encadena un fallo de confusión de rutas en el lote de la API REST con una...

WordPresShell

WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE-2026-60137 WordPress core. REST /batch/v1 route confusion → WPQuery authornotin SQLi → unauthenticated admin creation → webshell. Single file, Python stdlib only. Vulnerability: Adam Kues Searchlight Cyber. Affected: 6.9.0–6.9.4, 7.0.0–7.0.1...

CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example root@kitploit: python3...

dh-CVE_2016_2098

== README Prueba de concepto de https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Explotación: 1. Solo debes ejecutar el servidor rails de una manera que estés seguro de que no te exponga a ser explotado. 2. Ejecuta rails s 3. Ejecuta el siguiente comando curl -v -H "Accep...

ids_bypass

Disclaimer These programs is for Educational purpose ONLY. Do not use it without permission. injectserver: Proof-Of-Concept for CVE-2018-6794. If as a server side you break a normal TCP 3 way handshake packets order and inject some response data before 3whs is complete then data still will be...

CVE-2022-44877-white-box

Documento : https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider : https://github.com/gianlucaborello/libprocesshider /var/www/html Demo en YouTube : https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s Máquinas probadas CentOS 7 - CentOS Web...

CVE-2026-63030

CVE-2026-63030: wp2shell Exploit de inyección SQL por desincronización de la API Batch de WordPress Herramienta de prueba de concepto para extraer usuarios y hashes de contraseñas mediante la vulnerabilidad CVE-2026-63030 wp2shell. Información de la vulnerabilidad CVE : CVE-2026-63030 wp2shell CV...

CVE-2026-82600

SeaCMS up to version 13.6 is affected by a SQL injection vulnerability in the file /zyapi.php?ac=videolist, specifically through manipulation of the ids argument. The flaw allows remote, unauthenticated attackers to execute arbitrary SQL queries with low complexity . The impact is rated HIGH (7.3...