Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 Этот репозиторий рассказывает об эксплуатации zero-day уязвимости Atlassian Confluence, а также о её защите и анализе с точки зрения SecOps или Blue Team. Содержание О проекте Хронология Понимание эксплойта Список IOC Стратегия обнаружения Планы по смягчению последствий...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — 취약점 연구 RAPTOR Loop-Hunt Liferay Portal CE 7.0.3 GA4git 태그 7.0.3-ga4, 커밋 b2d7cc68a에 대해 RAPTOR loop-hunt 방법론으로 수행된 보안 감사: 결정적 정찰 → 25개의 격리된 생성 에이전트가 원시 소스 읽기 → 22개의 독립 판정 에이전트가 원시 소스로부터 반박 → 9개의 라이브 검증기가 Docker의 실제 GA4 인스턴스 공격. 핵심 소식: root 권한의 인증 없는 RCECVE-2020-7961 계열가 엔드투엔드...

CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE

CVE-2025-32433 - Erlang/OTP SSH RCE PoC Обзор PoC, демонстрирующий неаутентифицированное удаленное выполнение кода на SSH-сервере Erlang/OTP. Используя уязвимость в обработке сообщений протокола SSH, злоумышленник может выполнять произвольные команды на целевой системе без действительных учетных...

CVE-2023-27350

CVE-2023-27350 Эксплойт POC Это эксплойт Proof of Concept POC для CVE-2023-27350, уязвимости, обнаруженной в PaperCut MF/NG, которая позволяет неавторизованному злоумышленнику выполнять произвольный код с привилегиями SYSTEM. Требования Перед использованием этого эксплойта убедитесь, что вы...

CVE-Arsenal-Lab

TomcatScanner Расширенный инструмент для обнаружения и эксплуатации уязвимости CVE-2025-24813 TomcatScanner — это комплексный инструмент безопасности, предназначенный для обнаружения и эксплуатации уязвимости CVE-2025-24813 на серверах Apache Tomcat. Эта уязвимость связана с проблемой...

CVE-2023-20209

Я начал изучать Cisco Expressway после того, как заметил довольно много таких устройств в интернете во время Red Team-заданий, но у меня не было времени в рабочее время, чтобы исследовать продукт дальше. Изначально я искал обход аутентификации, чтобы сцепить его с RCE, но время вышло, и я...

WordPress Workreap - Remote Code Execution

WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...

WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution

WordPress WPCargo Track & Trace plugin before 6.9.0 is susceptible to remote code execution, The plugin contains a file which can allow an attacker to write a PHP file anywhere on the web server, leading to possible remote code execution. This can allow an attacker to execute malware, obtain...

Kentico CMS Insecure Deserialization Remote Code Execution

Kentico CMS is susceptible to remote code execution via a .NET deserialization vulnerability. id: CVE-2019-10068 info: name: Kentico CMS Insecure Deserialization Remote Code Execution author: davidmckennirey severity: critical description: Kentico CMS is susceptible to remote code execution via a...

D-Link DSL 2888a - Authentication Bypass/Remote Command Execution

D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55 are vulnerable to authentication bypass issues which can lead to remote command execution. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality. id: CVE-2020-24579 info: name: D-Li...

exacqVision Web Service - Remote Code Execution

exacqVision Web Service is susceptible to remote code execution which could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker wi...

VMware View Planner <4.6 SP1- Remote Code Execution

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability due to improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...

Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

Maian Cart <=3.8 - Remote Code Execution

Maian Cart 3.0 to 3.8 via the elFinder file manager plugin contains a remote code execution vulnerability. id: CVE-2021-32172 info: name: Maian Cart =3.8 to mitigate this vulnerability. reference: - https://dreyand.github.io/maian-cart-rce/ - https://github.com/DreyAnd/maian-cart-rce -...

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

The Import XML and RSS Feeds WordPress plugin before 2.1.5 allows unauthenticated attackers to execute arbitrary commands via a web shell. id: CVE-2023-4521 info: name: Import XML and RSS Feeds 2.1.5 - Unauthenticated RCE author: princechaddha severity: critical description: The Import XML and RS...

Appium Desktop Server - Remote Code Execution

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. id: CVE-2023-2479 info: name: Appium Desktop Server - Remote Code Execution author: zn9988 severity: critical description: | OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

NodeBB XML-RPC Request xmlrpc.php - XML Injection

A remote code execution RCE vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. id: CVE-2023-43187 info: name: NodeBB XML-RPC Request xmlrpc.php - XML Injection author: 0xParth...

Metabase < 0.46.6.1 - Remote Code Execution

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2...