CVE-2023-25136

OpenSSH CVE-2023-25136 Doble liberación previa a la autenticación – Informe y PoC ¿Qué es OpenSSH? OpenSSH es una herramienta popular utilizada para la comunicación segura y el acceso remoto. Fue desarrollada como una implementación libre y de código abierto del protocolo de comunicaciones Secure...

EXPLOIT-CVE-2026-26216

CVE-2026-26216 — Crawl4AI 인증되지 않은 RCE via hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · 사전 인증 RCE · CWE-94 코드 인젝션 Docker 서버의 Crawl4AI 필드에 임의의 Python 코드 를 허용합니다. 이 코드는 "집에서 만든 샌드박스"제한된 내장 함수 사전 내에서 exec로 실행됩니다. 그러나 import가 허용 목록에 남아 있어, 을 허용하여 전체 샌드박스를 무력화합니다...

CVE-2025-32433-Detection

CVE-2025-32433 Detection Author: te0rwx Created: 2025-08-27 Upt. 2026-08-16 Description A custom YARA rule for detecting known artifacts associated with CVE-2025-32433 , an Erlang/OTP SSH pre-authentication remote code execution RCE vulnerability. The rule was developed and validated against publ...

CVE-2024-57376

CVE-2024-57376 Exploit de ejecución remota de código sin autenticación para D-Link DSR-250 y DSR-250N Aviso de seguridad: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Uso root@kitploit: $ python3 exploit.py usage: Ejemplo root@kitploit: $ python3 exploit.py...

CVE-2021-26084_PoC

CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...

ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: root@kitploit: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N |...

CVE-2026-59243

CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...

CVE-2026-39987-POC

CVE-2026-39987 - Marimo 0.23.0 Pre-Auth RCE WebSocket Proof of Concept PoC exploit for a Critical Pre-Authentication Remote Code Execution RCE vulnerability in Marimo versions prior to 0.23.0. The vulnerability allows an unauthenticated attacker to connect to the WebSocket endpoint /terminal/ws a...

CVE-2025-54322

CVE-2025-54322 - Escáner de RCE Pre-Auth para XSpeeder SXZOS Un escáner de vulnerabilidades multihilo para CVE-2025-54322, una vulnerabilidad de ejecución remota de código no autenticada en el firmware XSpeeder SXZOS que afecta a más de 70.000 hosts a nivel mundial. 📋 Tabla de Contenidos Acerca d...

CVE-2023-38646

CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py root@kitploit: python3 single.py --url=http://127.0.0.1:8080 --command="curl...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά HestiaCP 서버용 읽기 전용 WordPress 보안 스캐너. 호스팅된 모든 사이트에서 wp2shell 침해 지표를 탐지합니다 — 클라이언트별 이메일 보고서, 코어 파일 diff, SHA256 웹셸 탐지, 위험 점수, 선택적 AI 평가 포함. ⚠️ 안전한 버전: WordPress 6.8.6 / 6.9.5 / 7.0.2 이상. 이 스크립트는 아무것도 수정하지 않습니다 — 전체 과정이 읽기 전용입니다. 🇬🇧 English...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani 概要 このリポジトリには、CraftCMS バージョン 4.x および 5.x に影響を与える事前認証リモートコード実行（RCE）脆弱性 CVE-2025-32432 の概念実証エクスプロイトスクリプトが含まれています。この脆弱性は、CraftCMS のアセット変換生成機能に存在します。 このエクスプロイトスクリプトは、以下の手順で脆弱性の検出と確認を自動化します。 1. CraftCMS 管理ダッシュボードからの CSRF トークンの抽出 2. PHP...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework-Toolkit Oracle WebLogic Server — SAML Authentication Bypass → Admin Takeover Exploit Framework & Mass Scanner For authorized security testing only. ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational and...

CVE-2023-38646

CVE-2023-38646-exploit "CVE-2023–38646 として識別されるこの脆弱性により、攻撃者は認証を必要とせずにサーバー上で任意のコマンドを実行できました。" cve-2023-38646 用の簡易リバースシェルエクスプロイトスクリプト。 この脆弱性を発見したわけではなく、スクリプトを作成しただけです。 使用法 root@kitploit: root@box:/CVE-2023-38646 python3 exploit.py / \ \ / / | | \ / \ | \ | \ / \ / /| || | / / | | \ \ / /| | | | | |...

CVE-2022-26134

CVE-2022-26134 Una vulnerabilidad RCE sin autenticación previa en Atlassian Confluence Resumen de la CVE En las versiones afectadas de Confluence Server y Data Center, existe una vulnerabilidad de inyección OGNL que permitiría a un atacante no autenticado ejecutar código arbitrario en una instanc...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

Pre-Auth Takeover of Build Pipelines in GoCD

GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticated attackers to leak configuration information including build secrets and encryption keys. id: CVE-2021-43287 info: name: Pre-Auth Takeover of Build Pipelines in GoCD author: dhiyaneshDk severity...

D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection

D-Tale prior to version 3.16.1 contains a remote code execution caused by the update-settings endpoint allowing updates to enablecustomfilters, letting attackers run malicious code on the server, exploit requires hosting D-Tale publicly. id: CVE-2024-55890 info: name: D-Tale = 3.16.0 - Pre-Auth R...

CVE-2024-51378

Vulnerabilidad de Inyección de Comandos en CyberPanel - CVE-2024-51378 Exploit para RCE Ejecución Remota de Código sin autenticación en CyberPanel mediante Inyección de Comandos Autor: Luka Petrovic refr4g Fecha de divulgación: Octubre 2024 Resumen Prueba de concepto PoC de un exploit para una...