CVE-2024-27348

CVE-2024-27348 🪶 Apache HugeGraph Server における CVE-2024-27348 の概念実証 PoC エクスプロイト RCE 認証されていないユーザーは、Apache HugeGraph Server の Groovy インジェクションを介して OS コマンドを実行できます。 使用方法 🛠 複数ターゲットの悪用 ☣️ root@kitploit: python3 CVE-2024-27348.py -f targets.txt -c "command to execute" 単一ターゲットの悪用 🗡 root@kitploit: python3...

CVE_2024_20356

CVE-2024-20356 这是CVE-2024-20356的概念验证代码，该漏洞是Cisco CIMC中的一个命令注入漏洞。 由Aaron编写，由SherllyNeo进行Rust化。 完整技术细节见 https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom 安装 root@kitploit: cargo build --release && cp ./target/release/CVE202420356 /.local/bin/ 用法 root@kitploit...

CVE-2026-63077

概要 • ビジュアルフロー • 要件 • 使用方法 • 制限事項 • 緩和策 !CAUTION この PoC はオペレーティングシステムのコマンドを実行し、TeamCity アプリケーションディレクトリを変更する可能性があります。隔離されたラボ、または明示的な書面による許可を得たシステムに対してのみ使用してください。 ⚡ 概要 JetBrains は、修正済みのバージョンより前のすべての TeamCity On-Premises...

CVE-2022-40635

CVE-2022-40635 : Contournement du bac à sable Groovy dans CrafterCMS Vulnérabilité de contrôle inadéquat des ressources de code gérées dynamiquement dans Crafter Studio de Crafter CMS permet aux développeurs authentifiés d'exécuter des commandes système via un contournement du bac à sable Groovy...

CVE-2024-29375

CSV-Injection-PoC Addactis IBNRS 3.10.3.107에서의 CSV 인젝션 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, 영향 점수: 5.3, 익스플로잇 점수: 1.3 영향받는 구성 요소: 프로젝트 설명, 식별자, 사용자 지정 삼각형 이름입력 삼각형 내 및 수익률 곡선 이름 매개 변수 스크린샷 1: 메모장을 열기 위해 프로젝트 설명에 Excel 수식 주입 스크린샷 2: 수식이 포함된 악성 IBNRS 프로젝트를 csvinjectionpoc.ibnrs로 저장 스크린샷 3...

CVE-2021-27928

Informazioni root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - Esecuzione di comandi OS tramite 'wsrepprovider' Data: 03/18/2021 Autore Exploit: Central InfoSec Versione: MariaDB 10.2 prima di 10.2.37 10.3 prima di 10.3.28 10.4 prima di 10.4.18 10.5 prima di 10.5.9 Percona Server fino al...

CVE-2021-27928

CVE-2021-27928 In diesem Repository finden Sie einen Proof of Concept zur Ausnutzung der Sicherheitslücke CVE-2021-27928 mittels eines Docker-Containers. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec...

wp2shell

wp2shell Esecuzione remota di codice pre-autenticazione per WordPress 6.9.0–6.9.4 e 7.0.0–7.0.1. Combina CVE-2026-63030 SQLi da confusione delle route del batch con CVE-2026-60137 rientro del changeset del customizer per ottenere la creazione di un amministratore senza autenticazione e l'esecuzio...

CVE-2025-56803

CVE-2025-56803 OS-Befehlsinjektions-Schwachstelle durch Plugin-Ausführung in der Figma-Desktop-Anwendung 1. Überblick Anwendung : Figma Desktop-Anwendung Version : 125.6.5 Anbieter : Figma, Inc. CWE : CWE-78: Unzureichende Neutralisierung spezieller Elemente in einem OS-Befehl „OS Command...

CVE-2019-9193-Home-Lab

CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Questo lab simula CVE-2019-9193 , una vulnerabilità di PostgreSQL 9.3–11.2 che consente di: root@kitploit: COPY ... FROM PROGRAM '' di eseguire comandi OS se eseguita da un superuser o da un ruolo con pgexecuteserverprogram. Il tuo compito è...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

EUVD-2026-65008

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Panoramica RCE critica pre-autenticazione in BeyondTrust Remote Support e Privileged Remote Access. Un attaccante remoto non autenticato può eseguire comandi del sistema operativo...

CVE-2026-55765

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

CVE-2026-55769

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning searchpath in fillDefaultParameters in pkg/management/postgres/pool/profiles.go. A role holding DATABASE OWNER...

EUVD-2026-62900

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the editmanagerxml capability could write a malicious Splunk Web Manager Extensible Markup Language XML configuration. When the same user opens the affected Splunk Web Manag...

CVE-2026-76335

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the editmanagerxml capability could write a malicious Splunk Web Manager Extensible Markup Language XML configuration. When the same user opens the affected Splunk Web Manag...

CVE-2026-76335

CVE-2026-76335 is a remote code execution vulnerability in Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . An authenticated user without the edit_manager_xml capability can write a malicious Splunk Web Manager XML configuration . When the same user opens the affected page, S...

CVE-2026-75917

SiYuan before v3.7.4 contains an XSS-to-RCE vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/movePathTo()). Document metadata fields (bookmark, alias, memo, alternate name) are concatenated into the aria-label HTML attribute without escaping, a...

PT-2026-78762

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An authenticated user lacking the edit manager xml capabili...