206 matches found
CVE-2022-36804-Bitbucket-RCE-Analysis
CVE-2022-36804: Bitbucket रिमोट कमांड निष्पादन RCE नल-बाइट आर्गुमेंट इंजेक्शन का तकनीकी विश्लेषण और प्रयोगशाला शोषण भेद्यता सारांश CVE-2022-36804 Atlassian Bitbucket सर्वर और डेटा सेंटर के REST API के भीतर एक उच्च/गंभीर आर्गुमेंट इंजेक्शन भेद्यता है। जबकि आधिकारिक NVD नेशनल भेद्यता डेटाबेस आधार...
CVE-2026-39987
CVE-2026-39987 marimo एक reactive Python notebook है। 0.23.0 से पहले, Marimo में Pre-Auth RCE कमजोरी मौजूद है। root@kitploit: / | |// / / / / / / |/ |/ \ / | | | \ /| | /| //|/|/ / | | | / -----/ | |/ |/ ----- \ | |/ \ / / / / //// / | |// CVE-2026-39987 Marimo /terminal/ws — बिना...
CVE-2026-63030
wp2shell — वर्डप्रेस कोर प्री-ऑथ RCE CVE-2026-63030 बैच रूट कन्फ्यूज़न + CVE-2026-60137 SQL इंजेक्शन बिना किसी डिपेंडेंसी वाला शोषण टूलकिट, WordPress Core में wp2shell कमज़ोरियों की श्रृंखला के लिए। एक अकेला अनाम HTTP अनुरोध, बिना किसी प्लगइन की आवश्यकता के, एक डिफ़ॉल्ट WordPress इंस्टॉलेशन पर...
awesome-jenkins-rce-2019
awesome-jenkins-rce-2019 С мая 2017 года в Jenkins не было RCE без аутентификации, но теперь есть! Он объединяет CVE-2018-1000861, CVE-2019-1003005 и CVE-2019-1003029 для более надёжного и элегантного удалённого выполнения кода без аутентификации! Затронутые версии ANONYMOUSREAD отключён Версия...
lab-cve-2020-0610
CVE-2020-0610 BlueGate लैब - Windows RD Gateway UDP/DTLS RCE Nuclei PR: https://github.com/projectdiscovery/nuclei-templates/pull/13076 CVE-2020-0610 BlueGate के लिए एक व्यापक पुनरुत्पादित प्रयोगशाला वातावरण, जो Microsoft Windows Remote Desktop Gateway RD Gateway में एक महत्वपूर्ण प्री-ऑथेंटिकेशन...
CVE-2025-55182
CVE-2025-55182: React2Shell - مجموعة أدوات تنفيذ الأوامر عن بُعد في Next.js !WARNING هذه الأداة مخصَّصة للاختبار المصرَّح به والأغراض التعليمية فقط. الوصول غير المصرَّح به إلى الشبكات واستخراج البيانات أمران غير قانونيين. يتحمَّل المستخدمون مسؤولية التأكد من حصولهم على التصريح المناسب قبل استخدام...
Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467
Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467 Apache OFBiz هو نظام مفتوح المصدر لتخطيط موارد المؤسسات. يوفر مجموعة من التطبيقات المؤسسية التي تدمج وتؤتمت العديد من العمليات التجارية للمؤسسة. CVE-2023-49070 هو ثغرة تنفيذ التعليمات البرمجية عن بُعد RCE قبل المصادقة تم...
cve-2026-39987
cve-2026-39987 التثبيت • الاستخدام • أمثلة أنا فقط أجرّب Go :D بالمناسبة: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended أمر مخصص -c: root@kitploit:...
CVE-2026-16606
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433 분석 포트폴리오 Erlang/OTP SSH 사전인증 원격 코드 실행 취약점 분석...
Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect
CVE-2023-43208 — Mirth Connect Pre-Auth RCE Pre-authenticated...
EUVD-2021-8626
Malicious code in bioql PyPI...
EUVD-2022-1523
Malicious code in bioql PyPI...
CVE-2021-21243
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted data from the request body. These endpoints do not enforce any authentication or authorization checks. This issue may lead to pre-auth RCE. This issue...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile
CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...
CVE-2024-47557
CVE-2024-47557 affects Xerox FreeFlow Core. The root cause is a path traversal flaw that enables pre-auth remote code execution . PT-2024-32656 corroborates a pre-auth RCE via path traversal but provides no specific affected versions or fix information. Exploitation details are not provided in th...
CVE-2024-47556
CVE-2024-47556 relates to Xerox FreeFlow Core and is described as a Pre-Auth RCE via Path Traversal. The provided documents indicate: affected product is Xerox FreeFlow Core (vague on specific versions) and the underlying issue is a path traversal condition enabling pre-auth remote code execution...
Netgear R7000 Backup.cgi Heap Overflow Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netgear R7000 backup.cgi Heap Overflow RCE', 'Description' = %q This module exploits a heap buffer overflow in the genie.cgi?backup.cgi page of...
QNAP QTS and Photo Station Local File Inclusion
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'QNAP QTS and Photo Station Local File Inclusion', 'Description' = %q This module exploits a local file inclusion in QNAP QTS and Photo Station th...