CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 El exp con interfaz gráfica para s2-061, solo por diversión y práctica Uso python CVE-2020-17530.py Introduce la dirección del objetivo Introduce el comando del sistema que quieras ejecutar Haz clic en Ejecutar PD：el exp incluye una función de reverse shell integrada, pero m...

[SECURITY] Fedora 43 Update: cri-o1.36-1.36.6-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.36-1.36.6-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2018-0296

CVE-2018-0296 Prueba CVE-2018-0296 y extrae nombres de usuario de Cisco ASA. Consulta https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ para más detalles técnicos. Menú de Ayuda $ ./CVE-2018-0296 -h Options: -h, --help display help information -u,...

Cisco ASA Improper Input Validation (CVE-2020-3304)

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

EUVD-2026-92784

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

PT-2026-104751

Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Perforce P4 Search enables an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, which...

CVE-2026-78862

An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...

CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

VulnCheck KEV: CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

Cisco ASA Unrestricted Upload of File with Dangerous Type (CVE-2020-3436)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files to specific folders on an affected device, which could lead to an unexpected devic...

CVE-2026-105220

A flaw was found in Twine. The application fails to properly sanitize markup during story import, allowing embedded malicious scripts to execute within the editor interface. By convincing a user to import a specially crafted story file, an attacker can leverage an internal inter-process...

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

CVE-2022-34919

CVE-2022-34919 El Contensis Content Management System anterior a la versión 15.2.1.79 tiene una falla en su interfaz 'Classic' que permite a un usuario no autenticado cargar y aprobar archivos arbitrarios. Al cargar un archivo aspx, es posible ejecutar comandos en el contexto del servidor web. Es...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Herramienta de Ejecución Remota de Comandos - Manual de Uso 1. Introducción a la Herramienta RedArrow3.2 es una herramienta gráfica para la vulnerabilidad de ejecución remota de comandos en ThinkPHP 5.0.23, que ofrece dos funciones principales: ejecución de comandos...

eero-zero-length-ipv6-options-header-dos

eeroOS: Vulnerabilidad de denegación de servicio en la interfaz Ethernet CVE-2023-5324 ========================================================================= Si los dispositivos eero Pro 5 reciben un paquete IPv6 cuya longitud de carga útil es cero y que contiene una cabecera de extensión de...

CVE-2024-23897

Usando el cliente La sintaxis general para invocar al cliente es la siguiente: java -jar jenkins-cli.jar -s JENKINSURL global options... command command options... arguments... info :- https://www.jenkins.io/doc/book/managing/cli/downloading-the-client CVE :-...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ Description A robust Phishing Framework with a full featured CLI interface. The project was born out necessity through of years of engagements with tools that just didn't do the job. Even though there are many projects out there, we were not able...

DiagTrackEoP

DiagTrackEoP Just another way to abuse SeImpersonate privilege. This PoC is based on this blog by @crisprss. In this blog @crisprss showed some interesting method to abuse SeImpersonate privilege using AzureAttestService which comes with recent verions of SQL server, PoC for that can be found her...

CVE-2024-20404

Descripción Una vulnerabilidad en la interfaz de administración basada en web de Cisco Finesse podría permitir a un atacante remoto no autenticado realizar un ataque SSRF en un sistema afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario...