CVE-2025-3248

CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Настройка лаборатории root@kitploit: docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Описание Версии Langflow до 1.3.0 подвержены инъекции кода в конечной точке...

Exploit_CVE-2021-24762

exploitcve-2021-24762 このリポジトリはCVE-2021-24762のエクスプロイトを示しています。これは、デフォルト設定で管理者パスワードを取得するBlind SQLiエクスプロイトです。 WordpressのPerfectSurveyプラグインを使用したラボ作業中に、SQL脆弱性に行き詰まりました。見つかったPoCはすべてsqlmapベースで、ラボでうまく動作しませんでした（追加の質問が多く、例えばアプリケーションが404を返す、タイムアウトが大きく変動するなどの問題がありました）。そこで、ラボを攻略するためにこれを自作しました。 目標...

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Уязвимость межсайтового скриптинга XSS Подтверждено на 1.6.1 более ранние версии, вероятно, также затронуты Описание: Обнаружено, что веб-приложение сохраняет и отображает вводимые пользователем данные без надлежащей проверки ввода и кодирования. Это...

EUVD-2026-69632

A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input. Successful exploitation could result in the execution of arbitrary commands with root privileges...

EUVD-2026-69631

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73767 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73767

Authenticated command injection vulnerabilities exist in the command line interface (CLI) of HPE AOS-CX (ArubaOS-CX). Successful exploitation allows an attacker with authenticated access to execute arbitrary commands as a privileged user on the underlying operating system. The CNA-assigned CVSS 3...

EUVD-2026-69630

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-73766

CVE-2026-73766 is a command injection vulnerability in the API endpoint of HPE AOS-CX . An authenticated remote attacker with administrative privileges can inject arbitrary commands, potentially executing them as a privileged user on the underlying operating system. The HPE-assigned CVSS 3.1 scor...

CVE-2026-73766 Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-73753

CVE-2026-73753 is an authenticated remote command injection vulnerability in the HPE ArubaOS-CX (AOS-CX) Command Line Interface . Through affected command-line operations, an authenticated low-privileged user can execute arbitrary commands with privileged user permissions on the underlying operat...

CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface

Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73751 Authenticated Remote Command Injection in AOS-CX Web-based Management Interface

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...

EUVD-2026-69615

An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...

CVE-2026-73751

CVE-2026-73751 is an authenticated remote command injection in the AOS-CX (Aruba) web-based management interface, assigned by HPE . An authenticated user with low-privileged access can submit crafted input through the web interface to execute arbitrary commands on the underlying operating system,...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 допускает инъекцию предупреждающего сообщения. Обнаружено: 15 февраля 2022 г. Затронутые версии: 9.4 POC-эксплойт: SASLogon/csrf имеет один параметр под названием "target" Этот параметр влияет на предупреждающее сообщение для URL, который пользователь собирался открыт...

CVE-2019-9202

CVE-2019-9202 Эксплойт удаленного выполнения кода Nagios IM 2.6: CSRF + SQLi + RCE + LPE -- удаленный root Описание Объединяя Cross-Site Request Forgery CSRF / обход авторизации CVE-2019-9203, можно использовать Union-based SQL injection CVE-2019-9204, Remote Code Execution RCE CVE-2019-9202 и...

CVE-2024-44541

CVE-2024-44541: Inventio Lite v4의 SQL 인젝션 취약점 설명 Inventio Lite v4는 /action=processlogin 엔드포인트에서 SQL 인젝션SQLi에 취약합니다. 이 취약점으로 인해 공격자는 POST 요청의 username 매개변수를 통해 임의의 SQL 쿼리를 주입할 수 있으며, 잠재적으로 비인가 액세스 및 데이터 추출로 이어질 수 있습니다. 취약한 코드 취약한 코드는 다음과 같습니다: root@kitploit: if!isset$SESSION"userid" $user =...

CVE-2024-32640

CVE-2024-32640 Доказательство концепции слепой SQL-инъекции MySQL Этот скрипт на Python демонстрирует эксплуатацию слепой SQL-инъекции на основе времени для баз данных MySQL , специально разработанную для CVE-2024-32640. Его можно использовать для проверки уязвимости целевого URL, и если уязвимос...

CVE-2024-30167

PoC для аутентифицированного внедрения команд в Atlona OME Отказ от ответственности : Данный proof of concept предоставлен исключительно для образовательных и исследовательских целей. Не используйте этот код в системах, которыми вы не владеете или на тестирование которых у вас нет явного...