CVE-2018-16167

安装及执行顺序 0. 安装LogonTracer 从DockerHub下载存在漏洞的LogonTracer v1.2.0版本。 $docker pull jpcertcc/docker-logontracer:v1.2.0 1. 运行LogonTracer 使用以下命令启动容器： $docker run \ --detach \ --publish=7474:7474 --publish=7687:7687 --publish=8080:8080 \ -e LTHOSTNAME=IPADDR \ jpcertcc/docker-logontracer:v1.2.0 2...

CVE-2026-39636-vulnerability-exp

1.这里运行之前必须打开burp suite（！！） 且默认的burp suite端口必须是8080，如果是其他的可以自行更改 2.下载所需的库 pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3.直接运行即可 CVE-2026-39363单次利用脚本 这里必须填如的是域名哦例如：www.baidu.com 不需要端口 CVE-2026-39363批量利用脚本 需要fofa搜索，把需要扫描的网站放在CVE-2026-39363批量利用脚本.py 的同级目录下 随后放入 随后运行脚本即可...

Nostromo_Python3

Código Exploit de Nostrom RCE para Python3: Uso: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

CVE-2021-44228-VULN-APP

CVE-2021-44228-VULN-APP NOTA: Esta es una máquina virtual vulnerable para mostrar qué es realmente esta vulnerabilidad log4j, ¡y demás! Instalación: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Escuchando en el puerto 8080...

cve-2018-11776-docker

CVE-2018-11776 Docker container and POC exploit written in Go You can build your own image and run it: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename Or you just can pull the one I created with love for you: docker container run -it --rm -p 8080:8080...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

0day-POC-for-CVE-2024-27173

Poc CVE-2024-27173 Únete a t.me/SpiderzTM Dorks de Shodan y FOFA Usa los siguientes dorks para encontrar sistemas potencialmente vulnerables: Dorks de Shodan: product:"Toshiba e-Studio" "Remote Command" http.title:"Toshiba e-Studio" port:8080 Dorks de FOFA: app="Toshiba-e-Studio" title="Toshiba...

EUVD-2026-77755

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

CVE-2026-77884 Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...

EUVD-2026-57012

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables,...

Improper Access Control

mcppinotserver is vulnerable to Improper Access Control. The vulnerability is due to the MCP server defaulting to an unauthenticated HTTP service bound to 0.0.0.0:8080, which allows an attacker on the network to access MCP tools and exploit the server's Pinot credentials to execute unauthorized S...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224 Unauthenticated IPv6 WAN Management Exposure

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

CVE-2026-50224

The web administration panel binds broadly to the public IPv6 address space on port :::8080 without default firewall limits, making internal API endpoints reachable over the WAN...

PT-2026-46176

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The web administration panel binds broadly to the public IPv6 address space on port ':::8080' without default firewall limits. This configuration allows internal...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the fact that the web management panel is widely bound to the public IPv6 address space at port :::8080, with no default firewa...

Zor-Seviye-xxe-Lab

AltaySec SOC Policy Manager — Zor Seviye Blind OOB XXE Lab...

CVE-2026-42302

FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...

EUVD-2026-28850

FastGPT is an AI Agent building platform. From version 4.14.10 to before version 4.14.13, the agent-sandbox component of FastGPT is vulnerable to unauthenticated Remote Code Execution RCE. The startup script entrypoint.sh initializes code-server with the --auth none flag and binds the service to...