CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Анализ кода Cockpit: Неаутентифицированное удалённое выполнение кода через внедрение аргументов командной строки SSH...

CVE-2021-3129-Script

CVE-2021-3129 Laravel = v8.4.2 режим отладки: удалённое выполнение кода CVE-2021-3129 Использование： root@kitploit: python3 exp.py http://127.0.0.1:8888 Try to use Laravel/RCE1 for exploitation. +exploit: Laravel/RCE1 Result: Try to use Laravel/RCE2 for exploitation. +exploit: Laravel/RCE2 Result...

CVE-2026-36340

CVE-2026-36340 Krayin CRM v2.1.5의 원격 코드 실행RCE 취약점 Krayin CRM v2.1.5의 원격 코드 실행RCE 취약점 CVE: CVE-2026-36340 심각도: 치명적Critical 영향을 받는 제품: Krayin CRM v2.1.5 취약점 유형: 원격 코드 실행RCE 인증 필요: 예 요약 Krayin CRM v2.1.5 에 치명적인 원격 코드 실행RCE 취약점이 존재합니다. 이 취약점은 인증된 사용자가 이메일 작성 기능을 통해 임의의 PHP 파일을 업로드할 수 있게 합니다. 업로드된 첨부...

CVE-2021-27850_POC

CVE-2021-27850 Exploit Aperçu CVE-2021-27850 est une vulnérabilité critique d'exécution de code à distance non authentifiée qui a été trouvée dans toutes les versions récentes d'Apache Tapestry. En téléchargeant le fichier AppModule.class, nous pouvons extraire la clé secrète HMAC utilisée pour...

CVE-2025-1094-PoC-Postgre-SQLi

CVE-2025-1094 の分析とエミュレーション設定 2025年3月14日に実施されたこの詳細な調査では、提供されたエミュレーション設定と概念実証（PoC）の実行に基づいて、PostgreSQLにおける仮想的な高深刻度SQLインジェクション脆弱性であるCVE-2025-1094を調査します。分析では、脆弱性の概要、根本原因、ファイルの寄与、PoCの手順、および緩和策をカバーし、エミュレーションプロセスからのすべての複雑な詳細を組み込んでいます。 脆弱性の概要...

CVE-2026-23744

CVE-2026-23744 – 개념 증명PoC 이 PoC의 Python 스크립트는 MCPJam inspector버전 리스닝 포트로 교체 그런 다음 다른 셸을 열고 PoC를 실행하세요: root@kitploit: cd CVE-2026-23744 python3 exploit.py 참고 자료 HTTP 엔드포인트 노출로 인한 MCPJam inspector의 RCE GHSA-232v-j27c-5pp6 MCPJam/inspector@e6b9cf9...

CVE-2023-38408

Справочная информация https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

Log4j-Vulnerability

Vulnérabilité Log4j Tutoriel: https://youtu.be/PNDBjoT83zA Tutoriel: https://cryptodeeptech.ru/log4j-vulnerability Contexte sur Log4j L'équipe de sécurité d'Alibaba Cloud a divulgué publiquement une vulnérabilité critique CVE-2021-44228 permettant une exécution de code à distance non authentifiée...

CVE-2026-32746

CVE-2026-32746 — Переполнение буфера SLC в LINEMODE telnetd Удалённое выполнение кода до аутентификации через переполнение буфера в обработчике SLC Set Local Characters режима LINEMODE в telnetd из GNU InetUtils. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Обзор Функция addslc в telnetd/slc.c...

CVE-2026-77018 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

CVE-2026-77018

The Workeera WordPress plugin (Remote Tech Job Board) before 1.0.6 allows users with a subscriber role to submit unrestricted profile values, which the plugin writes as an unvalidated file into a publicly reachable directory. This mass-assignment flaw enables arbitrary file upload and, consequent...

EUVD-2026-66880

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

CVE-2026-19225

Defender Security WordPress plugin versions before 6.2.0 fail to restrict a network-wide setting (via the Hub Connector ) to network administrators on multisite installations. As a result, an administrator of any single site in the network can execute arbitrary code across the entire network . Th...

WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...

CVE-2026-19225 Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 POC 최적화, 일회성 검증이 더 이상 아님 Optimized POC, no longer a one-time validation 경고: 이 프로그램은 로그 정보의 무결성을 파괴합니다. 서버 데이터를 백업하십시오! 서버 침투 테스트 권한이 있는 경우에만 사용하십시오! Warning: This program will destroy log information integrity, please back up server data! Use only if you have serve...

CVE-2022-22947_EXP

1. Vulnérabilité d'exécution de code à distance dans Spring Cloud Gateway Niveau de danger : Élevé Statut POC/EXP : Public Numéro CNVD : CNNVD-2022-16402 Numéro CVE : CVE-2022-22947 2. Périmètre concerné : VMWare Spring Cloud Gateway 3.1.0 VMWare Spring Cloud Gateway =3.0.0, =3.0.6 VMWare Spring...

CVE-2023-46805

19/01/2024 Update Updated with the latest info based on Assetnote's blog. Now three checks are executed before a status is shown, this also to better detect older versions of Avanti Blogs with analysis of the CVE: https://attackerkb.com/topics/AdUh6by52K/cve-2023-46805/rapid7-analysis...

CVE-2019-19781

CVE-2019-19781 Эксплойт удаленного выполнения кода для Citrix Application Delivery Controller и Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST КОМАНДАДЛЯВЫПОЛНЕНИЯ например : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Aperçu CVE-2022-21445 score CVSS 9,8, la vulnérabilité est une désérialisation de données non fiables, identifiée dans le composant ADF Faces, pouvant être exploitée à distance sans authentification pre-authentication par des pirates pour exécuter du code à distance RCE. Cette vulnérabilité a été...