confusploit

Este é um script para encontrar servidores vulneráveis ao CVE-2022-26134 e pode ser usado em conjunto com SHODAN CLI e Bash Scripting One-Liner Por favor, utilize apenas para fins legais e educacionais Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Em 02 de junho de...

CVE-2024-37054

mlflow-pickle-rce MLflow मॉडल रजिस्ट्रियों के विरुद्ध pickle डीसेरिएलाइज़ेशन RCE के लिए सामान्य proof-of-concept CVE-2024-37054-शैली। यह केवल MLflow REST API से बात करता है — इसके सामने किसी विशिष्ट क्लाइंट एप्लिकेशन के बारे में कोई धारणा नहीं बनाता। ⚠️ केवल अधिकृत सुरक्षा परीक्षण के लिए। इसे केवल...

Mobile-Drop-Device-SOC-Detection

🛡️ Projeto Phantom: Simulação de Detecção SOC com Dispositivo Móvel "Drop Device" Este projeto demonstra um workshop de laboratório SOC de ponta a ponta, simulando como um dispositivo Android não autorizado e sem root Casper Via S, usado como um "Drop Device" dentro de uma rede interna, é detectad...

CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQL इंजेक्शन → रूट RCE CVE-2026-67401 के लिए प्रूफ-ऑफ-कॉन्सेप्ट, cPanel & WHM की EmailTrack कार्यक्षमता में एक गंभीर SQL इंजेक्शन भेद्यता जो मेल-संबंधित विशेषाधिकारों वाले प्रमाणित उपयोगकर्ता को मनमानी फ़ाइलें लिखने और रूट के रूप में कोड निष्पादित करने की...

CVE-2026-92247

SynaptikCMS File Manager — تنفيذ تعليمات برمجية عن بُعد بعد المصادقة الثغرة الأمنية تنفيذ تعليمات برمجية عن بُعد بعد المصادقة في SynaptikCMS File Manager تتيح أداة إدارة الملفات في SynaptikCMS لمهاجم مُصادَق عليه رفع ملف ثم إعادة تسميته إلى ملف PHP. يمكن استغلال سلوك الرفع وإعادة التسمية هذا لوضع...

CVE-2026-38526

CVE-2026-38526 — Krayin CRM ≤ 2.2.x प्रमाणित RCE ⚠️ कानूनी चेतावनी : यह कोड केवल शैक्षिक उद्देश्यों और अधिकृत परीक्षण CTF, बग बाउंटी, निजी लैब के लिए प्रदान किया गया है। लेखक अवैध उपयोग के लिए उत्तरदायी नहीं है। विवरण Krayin CRM Webkul ≤ 2.2.x एंडपॉइंट /admin/tinymce/upload को उजागर करता है जो एक...

CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

CVE-2025-32432-exploit-by-P34NUT

CVE-2025-32432 — Craft CMS प्री-ऑथ RCE एक्सप्लॉइट लेखक: P34NUT2 भेद्यता: Craft CMS में रिमोट कोड एक्ज़ीक्यूशन प्री-ऑथेंटिकेटेड CVE: CVE-2025-32432 लक्ष्य: कोई भी भेद्य Craft CMS इंस्टेंस 3.x / 4.x / 5.x — Hack The Box: Orion पर परीक्षित ⚠️ अस्वीकरण यह टूल केवल शैक्षिक उद्देश्यों और अधिकृत...

EUVD-2026-94620

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

CVE-2026-76268 Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

CVE-2026-76268

In Splunk Enterprise versions below 10.4.3 and 10.2.7 , a missing authentication flaw in the Patroni REST API allows an unauthenticated network attacker to execute arbitrary operating-system commands on a search head cluster member. The root cause is the lack of authentication requirements for cr...

GHSA-W794-RJ3P-XV45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Summary Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to reach the MCP server settings "Settings → MCP Servers → Add MCP Server",...

GHSA-R488-J9VJ-WX3Q Payload Form Builder has an RCE issue

Impact A vulnerability in @payloadcms/plugin-form-builder in versions = 3.90.0 or = 4.0.0-canary.34...

Payload Form Builder has an RCE issue

Impact A vulnerability in @payloadcms/plugin-form-builder in versions = 3.90.0 or = 4.0.0-canary.34...

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

CVE-2026-12944

CVE-2026-12944: Langflow 1.10.0 — urllib SSRF Langflow OSS ≤ 1.10.0 — ثغرة تسمح بتنفيذ تعليمات برمجية عشوائية عبر urllib.request / socket في المكوّنات المخصّصة. تجاوز ماسح المكوّنات قائمة الحظر الخاصة بهذه الوحدات من المكتبة القياسية. تم إصلاحها في 1.10.1 IBM. الخطورة : PR:L قابلة لإعادة الإنتاج...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Exploração de RCE Zero-Click OLE do Windows Detectada CVE-2025-21298 - Passo a Passo 🔎 Índice 1. Situação 2. Visão Geral do Alerta 3. Ferramentas Utilizadas 4. Análise Segurança de E-mail Gerenciamento de Logs Log de Proxy Segurança de Endpoint Histórico do Terminal Ação de Rede Processo...

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

GHSA-R543-Q48M-4C9J WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...