CVE-2024-25081_2025-47273

CVE-2024-25081 und CVE-2025-47273 Proof of Concept FontForge in Version ≤ 20230101 und Setuptools-Bibliothek in Version Proof of Concept zur Erhöhung der Privilegien auf den Benutzer, der eine Aufgabe mit Font Forge ausführt. Die zweite CVE erhöht die Privilegien auf root, vorausgesetzt, Sie habe...

CVE-2018-6574

CVE-2018-6574...

CVE-2019-17658

Exploit del percorso di servizio non racchiuso tra virgolette in FortiClient CVE-2019-17658 FortiClient per Windows precedente alla versione 6.2.3 è vulnerabile a una vulnerabilità del percorso di servizio non racchiuso tra virgolette. Ciò può consentire a un attaccante di ottenere privilegi...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 Fortinet FortiWeb Exploit di Path Traversal RCE Uno strumento di ricerca sulla sicurezza per rilevare e testare la vulnerabilità CVE-2025-64446 in Fortinet FortiWeb Web Application Firewall WAF. Questa vulnerabilità critica zero-day di path traversal è stata attivamente sfruttata i...

CVE-2026-49009

CVE-2026-49009 — Mender Server Authentifizierter Path Traversal zu Remote Code Execution Entdeckt von j0xh-sec via HackerOne · PoC von INTELEON404 Inhaltsverzeichnis Zusammenfassung der Schwachstelle Betroffene Versionen Technische Analyse Proof of Concept Python-Exploit Nuclei-Vorlage ShodanX +...

7Ziprowler

7-ZiProwler CVE-2025-11001 Übersicht In diesem Repository werden die Ergebnisse meiner kurzen Recherche zu CVE-2025-11001 vorgestellt. Der Exploit ist in Python geschrieben und nutzt den Projektmanager astral uv. Referenzen Einige: NIST ZDI CVE News WIZ Kurze Analyse Ich werde nicht zu tief in di...

CVE-2023-47464

GL-AX1800 Router Security Assessment Report Overview This report outlines the findings of a comprehensive security assessment conducted on the GL-AX1800 router manufactured by GL.iNet. The assessment aimed to identify potential vulnerabilities and weaknesses in the device's security measures...

CVE-2024-24919

CVE-2024-24919 Ciao a tutti, condivido uno script modificato di CVE-2024-24919 in grado di estrarre percorsi classificati come critici...

CVE-2025-47273-POC

setuptools Path Traversal CVE-2025-47273 📖 Panoramica Proof-of-concept di exploit per una vulnerabilità di path traversal in Python setuptools 78.1.1. Abusando della funzione downloadurl del componente PackageIndex, un attaccante può scrivere file arbitrari in qualsiasi posizione del filesystem —...

CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: Shodan:http.html:"Nexus Repository" Hunter:product.name="Nexus Repository" FOFA:app="Nexus-Repository-Manager" Poc : root@kitploit: GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1 Host: localhost:8081...

mountain_goat

Ciao, sono una capra di montagna e sto per incornare le tue connessioni TCP, perché è una cosa molto da capra. Questa è una PoC che dimostra tecniche che sfruttano CVE-2016-5696 Attacchi TCP Off-Path: il limite di velocità globale considerato pericoloso di Yue Cao, Zhiyun Qian, Zhongjie Wang, Tua...

CVE-2026-80690

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba-rpmbs list in ufshcd Initialize the hba-rpmbs list in ufshcdallochost to prevent NULL pointer dereference in the device teardown path if ufsrpmbprobe fails...

AZL-98124 CVE-2026-80650 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

AZL-98063 CVE-2026-80611 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-19084

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-12513

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

CVE-2023-23397

CVE-2023-23397 Ausnutzungs- & Mitigations-Demo 📌 Übersicht Dieses Projekt demonstriert die Erkennung, Ausnutzung und Abwehr von CVE-2023-23397 , einer kritischen Zero-Click-NTLM-Relay-Schwachstelle in Microsoft Outlook für Windows. Diese Schwachstelle wird über Kalendereinladungen ausgenutzt und...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC für CVE-2023-20198 Sicherheitslückeninformationen und Nutzung des Exploits bereitgestellt von smokeintheshell Siehe Referenzen Endpunkt, HTTP-Content-Typ und Header-Management wurden gegenüber anderen bestehenden PoCs modifiziert, um in Situationen zu...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: errore: i seguenti argomenti sono obbligatori: -H/--host esempio: python3 grafana-exploit.py --host in caso di lettura riuscita di un file arbitrario mostra l'URL della richiesta e il comando curl root@kitploit: +RequestURL...