270265 matches found
CVE-2026-33827
🔴 CVE-2026-33827: تنفيذ التعليمات البرمجية عن بُعد RCE في Windows TCP/IP 📌 نظرة عامة CVE-2026-33827 هي ثغرة أمنية حرجة من نوع تنفيذ التعليمات البرمجية عن بُعد RCE تؤثر على حزمة شبكات TCP/IP في Windows. تُصنَّف كخلل سباق Race Condition ناتج عن مزامنة غير صحيحة عند التعامل مع الموارد المشتركة أثناء...
log4shell
Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...
S2-062
S2-062 CVE-2021-31805/s2-062 Batch Scanning and Exploitation Please comply with laws and regulations; unauthorized attacks on website systems are prohibited. Usage Batch Scan Mode root@kitploit: python3 CVE-2021-31805.py -m scan -f 123.txt Command Execution Mode root@kitploit: python3...
CVE-2021-44529
CVE-2021-44529 Vendor Homepage: https://www.ivanti.com/ Software Link: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version: CSA 4.6 4.5 - EOF Aug 2021 Execute root@kitploit: python3 exploit.py Example root@kitploit: python3 exploit.py 'https://x.x.x.x' 'ls'...
CVE-2026-1731
BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...
CVE-2026-1457
CVE-2026-1457: TP-Link VIGI C385 Authenticated Remote Code Execution Overview CVE-2026-1457 is an authenticated buffer overflow vulnerability in the web API of TP-Link VIGI C385 V1. This vulnerability allows authenticated attackers to perform remote code execution RCE. CVSS v4.0 Score: 8.5 High...
wonderplugin
Wonderplugin para RCE ¡NO USES ESTE PLUGIN FALSO EN TU SERVIDOR WEB DE PRODUCCIÓN! Este repositorio está destinado a probar una vulnerabilidad en WonderCMS; este plugin falso contiene una puerta trasera web shell, que puedes encontrar en el archivo evil.php. Artículo relacionado WonderCMS 3.1.3 -...
CVE-2026-3844
CVE-2026-3844 — Breeze Cache RCE Unauthenticated Arbitrary File Upload → Remote Code Execution...
CVE-2026-33725
CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ≥ v1.47 and v1.54.22 Metabase Enterprise ≥ v1.54.0 and v1.54.22 Metabase...
CVE-2026-34159-Vulnerability-Research-Analysis-Detection
CVE-2026-34159-Vulnerability-Research-Analysis-Detection Critical buffer validation bypass in deserializetensor llama.cpp b8492. Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPHCOMPUTE. ASLR bypass + RCE over TCP 50052. Contains: Technical analysis & exploit...
Apache-CVE-2026-23918-fix
خادم Apache HTTP: http2: تحرير مزدوج Double Free واحتمال تنفيذ تعليمات برمجية عن بُعد RCE عند إعادة التعيين المبكر CVE-2026-23918. ثغرة تحرير مزدوج Double Free واحتمال تنفيذ تعليمات برمجية عن بُعد RCE في خادم Apache HTTP مع بروتوكول HTTP/2. تؤثر هذه المشكلة على خادم Apache HTTP: 2.4.66. يُنصح...
PAN-OS-User-ID-Buffer-Overflow-PoC
🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...
CVE-2026-0300-PANOS
CVE-2026-0300-PANOS 🔓 تنفيذ التعليمات البرمجية عن بُعد غير المصادق عليه RCE في بوابة User-ID الخاصة بـ Palo Alto Networks PAN-OS 📋 تفاصيل الثغرة الأمنية...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...
cve-2026-21962
CVE-2026-21962 — PATH-TRAVERSAL EOP / RCE DUE TO URI NORMALIZATION Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-09-24 Affected Vendor: Oracle Affected Product: Oracle OHS / Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS...
CVE-2026-3844
CVE-2026-3844 — Breeze Cache = 2.4.4 Unauthenticated Arbitrary File Upload to RCE Overview...
cve-2026-33937
CVE-2026-33937 - Preuve de concept PoC d'exploitation RCE Handlebars Description CVE-2026-33937 est une vulnérabilité critique d'exécution de code à distance RCE dans Handlebars, causée par une gestion non sécurisée des entrées d'arbre de syntaxe abstraite AST. La vulnérabilité permet aux...
CVE-2026-26720-Twenty-RCE
Twenty CRM - Authenticated Remote Code Execution RCE Overview Product: Twenty CRM Vulnerability: Remote Code Execution RCE via Serverless Workflow Functions Severity: Critical Affected Component: Workflow Automation Code - Serverless Function Tested Version: v1.15.0 This repository documents a...
CVE-2025-49844
CVE-2025-49844 – Use-After-Free Issue in Redis's Lua Parser In short and simple terms, you run this script and instead of root@kitploit: localhost you provide the target IP and configure its port, it connects if it is vulnerable, and you can execute any command you want. In Shodan, you can also...