271565 matches found
CVE-2024-4879
CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...
CVE-2020-17530
S2-061 脚本皆根据vulhub的struts2-059/061漏洞测试环境来写的，不具普遍性，还望大佬多多指教 struts2-061-poc.py（可执行简单系统命令） 用法：python struts2-061-poc.py http://ip:port command 例子：python struts2-061-poc.py http://192.168.0.7:8080 whoami S2-061-shell.py（可反弹shell） 用法： 1. 首先在一台机器A上监听指定端口例如：nc -lvvp 7777） 2. 执行脚本：python2 S2-061-shell.p...
CVE-2026-61410
Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) contain a Missing Authorization vulnerability. An unauthenticated remote attacker can execute commands on the target system by sending a specially crafted request to the application...
EUVD-2026-72364
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2026-61410
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2021-22911-RocketChat
CVE-2021-22911 — Rocket.Chat 3.12.1 RCE Improvisado Descripción Explota una vulnerabilidad de inyección NoSQL sin autenticación en Rocket.Chat 3.12.1 para filtrar el secreto TOTP del administrador y el token de restablecimiento de contraseña, tomar el control de la cuenta de administrador y logra...
CVE-2021-2109
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...
CVE-2023-38408
OpenSSH 漏洞 - CVE-2023-38408 📚 简介 在 OpenSSH（9.3p2 之前的版本）中发现了一个漏洞。OpenSSH 的 ssh-agent 中的 PKCS11 功能具有一个不够可信的搜索路径，如果代理被转发到攻击者控制的系统（/usr/lib 中的代码加载到 ssh-agent 中不一定安全），则会导致远程代码执行。该缺陷允许攻击者控制服务器上转发的代理套接字，并能够写入客户端主机的文件系统，从而以运行 ssh-agent 的用户权限执行任意代码。 在下面的示例中，我们可以简要地观察从探测到攻陷 alice 用户的步骤。 步骤 1 - 攻击 用户通过 SSH...
EUVD-2026-72361
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
CVE-2026-61409
Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...
CVE-2026-61409
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
CVE-2022-24734
CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP in Configuration - Add New Setting. The user must have a rights to add or update setting. This is tested on MyBB 1.8.29. Sources: https://github.com/mybb/mybb/ https://vulners.com/cve/CVE-2022-24734...
CVE-2022-46169
CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. Auth Bypass Add X-Forwarded-For header to bypass authentication, note that its value is not a fixed value. Brute Force Use Burp Intruder to fuzz test the values of hostid and localdataids. RCE The point of...
CVE-2021-22911
CVE-2021-22911 预认证盲注NoSQL注入导致Rocket Chat 3.12.1远程代码执行 getPasswordPolicy方法容易受到NoSQL注入攻击，且不需要身份验证/授权。它可以通过泄露密码重置令牌来接管账户。接管管理员账户会导致远程代码执行。 解释 1. 劫持用户账户（未经身份验证） 在getPasswordPolicy 端点的密码重置token 参数中存在NoSQL注入，该参数接受JSON对象，允许我们使用$regex运算符。我们利用它来执行盲注NoSQL注入以获取重置令牌。 2. 权限提升至管理员（已认证）...
CVE-2021-25641-Proof-of-Concept
The 0xDABB of Doom - CVE-2021-25641 概念验证代码 Apache/Alibaba Dubbo = 2.7.3 中 CVE-2021-25641 RCE 的 PoC 代码，利用未受信任数据的反序列化；影响版本 = 2.7.6，使用不同 Gadget 在 Checkmarx 博客文章 "The 0xDABB of Doom" 中有深入介绍 https://www.checkmarx.com/blog/technical-blog/the-0xdabb-of-doom-cve-2021-25641/...
CVE-2026-45447
🚨 CVE-2026-45447 - Critical OpenSSL Use-After-Free Vulnerability Heap Use-After-Free in PKCS7verify allowing memory corruption, crashes, and potential remote code execution. 📖 Executive Summary CVE-2026-45447 is a critical vulnerability in OpenSSL's PKCS7 verification functionality. The flaw exis...
asa_tools
Cisco ASA RCE 验证 该脚本可用于验证 CVE-2016-1287 是否存在。 它需要安装 python3 和 python hexdump 模块 root@kitploit: $ sudo pip3 install hexdump 可通过以下方式运行： root@kitploit: python3 cisco-asa.py IP.IP.IP.IP:port...
CVE-2017-10271
CVE-2017-10271 Uso: CVE-2017-12149.py http://targetip:port/ WEBLOGIC RCE Funciona solo con Windows, puedes editar un poco el código para Linux...
CVE-2025-47812-poc
CVE-2025-47812 Wing FTP Server 远程代码执行（RCE）漏洞利用工具 CVE-2025-47812 📌 致谢 ：漏洞由 Julien @MrTuxracer 发现。 本 PoC 实现基于其原始研究成果。 本仓库包含针对 Wing FTP Server 远程代码执行漏洞（CVE-2025-47812） 的 Python 漏洞利用代码。该严重缺陷允许攻击者在受影响的 Wing FTP Server 实例上以 root/SYSTEM 身份实现远程代码执行，即使仅启用了匿名访问。 🚀 概述 该漏洞源于 Wing FTP Server 在认证过程中对用户名参数中的 NU...