270256 matches found
Apache-CVE-2026-23918-fix
خادم Apache HTTP: http2: تحرير مزدوج Double Free واحتمال تنفيذ تعليمات برمجية عن بُعد RCE عند إعادة التعيين المبكر CVE-2026-23918. ثغرة تحرير مزدوج Double Free واحتمال تنفيذ تعليمات برمجية عن بُعد RCE في خادم Apache HTTP مع بروتوكول HTTP/2. تؤثر هذه المشكلة على خادم Apache HTTP: 2.4.66. يُنصح...
PAN-OS-User-ID-Buffer-Overflow-PoC
🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...
CVE-2026-0300-PANOS
CVE-2026-0300-PANOS 🔓 تنفيذ التعليمات البرمجية عن بُعد غير المصادق عليه RCE في بوابة User-ID الخاصة بـ Palo Alto Networks PAN-OS 📋 تفاصيل الثغرة الأمنية...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...
cve-2026-21962
CVE-2026-21962 — PATH-TRAVERSAL EOP / RCE DUE TO URI NORMALIZATION Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-09-24 Affected Vendor: Oracle Affected Product: Oracle OHS / Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS...
CVE-2026-3844
CVE-2026-3844 — Breeze Cache = 2.4.4 Unauthenticated Arbitrary File Upload to RCE Overview...
cve-2026-33937
CVE-2026-33937 - Preuve de concept PoC d'exploitation RCE Handlebars Description CVE-2026-33937 est une vulnérabilité critique d'exécution de code à distance RCE dans Handlebars, causée par une gestion non sécurisée des entrées d'arbre de syntaxe abstraite AST. La vulnérabilité permet aux...
CVE-2026-26720-Twenty-RCE
Twenty CRM - Authenticated Remote Code Execution RCE Overview Product: Twenty CRM Vulnerability: Remote Code Execution RCE via Serverless Workflow Functions Severity: Critical Affected Component: Workflow Automation Code - Serverless Function Tested Version: v1.15.0 This repository documents a...
CVE-2025-49844
CVE-2025-49844 – Use-After-Free Issue in Redis's Lua Parser In short and simple terms, you run this script and instead of root@kitploit: localhost you provide the target IP and configure its port, it connects if it is vulnerable, and you can execute any command you want. In Shodan, you can also...
CVE-2026-25053
CVE-2026-25053 Read: https://yadhu.in/2026/02/09/Breaking-Down-the-n8n-Git-Node-Vulnerability-CVE-2026-25053-Remote-Code-Execution/...
CVE-2026-22444
CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...
CVE-2024-42845-Exploit
CVE-2024-42845: Remote Code Execution RCE in Invesalius 3.1 Exploit Details Exploit Title : Invesalius 3.1 - Remote Code Execution RCE Discovered By : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Exploit Author : Alessio Romano sfoffo, Riccardo Degli Esposti partywave Date : 2024-08-23...
CVE-2024-27115-Exploit
SOPlanning 1.52.01 - Remote Code Execution RCE Authenticated Exploit Details Exploit Title : SOPlanning 1.52.01 Simple Online Planning Tool - Remote Code Execution RCE Authenticated Date : 6th October, 2024 Exploit Author : Ardayfio Samuel Nii Aryee Version : 1.52.01 Tested on : Ubuntu Descriptio...
CVE-2026-21509-handler
CVE-2026-21509 Office Kill-Bit Manager PowerShell script to check, apply, and test the Kill-Bit protection for the CVE-2026-21509 Microsoft Office zero-day vulnerability affecting Office 2016/2019/LTSC. What is CVE-2026-21509? Critical RCE vulnerability in Microsoft Office OLE/COM handling CVSS...
CVE-2023-50164-PoC
CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: root@kitploit: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc ...
SmarterMail-CVE-2026-24423-
SmarterMail ConnectToHub RCE A Python-based exploit for CVE-2026-24423 , an unauthenticated Remote Code Execution vulnerability in SmarterTools SmarterMail's ConnectToHub functionality. Intended use: Authorized security testing, CTFs, Hack The Box labs, and controlled research environments only...
log4j_github_repository
This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...
CVE-2026-22738
CVE-2026-22738 Reproduction Environment Vulnerability Description CVE-2026-22738 is a SpEL Spring Expression Language injection vulnerability in Spring AI SimpleVectorStore that can lead to unauthenticated remote code execution RCE. Affected Versions...
cve-2026-40176-cve-2026-40261
CVE-2026-40176 Composer Perforce Repository Remote Code Execution RCE 📋 Summary Command Injection vulnerability in Composer's Perforce repository driver allowing Remote Code Execution RCE through insufficient input validation in repository URL processing. 🎯 Vulnerability Details...