CVE-2021-21972

Instrucciones de uso y descargo de responsabilidad Vulnerabilidad de ejecución remota de código en VMware vCenter Server CVE-2021-21972 Modo de empleo: Python CVE-2021-21972.py urls.txt Cada URL en urls.txt debe estar en una línea. Las direcciones de las vulnerabilidades se guardan en vul.txt...

EUVD-2026-72384

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass in its REST API caused by MySQL type coercion : unauthenticated attackers can send small integers (0–9) instead of string tokens, allowing them to match token hashes and access protected endpoints. Successful exploitation exposes device cre...

CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

cve-2019-3398

cve-2019-3398 Details A quick python proof of concept for CVE-2019-3398 confluence vulnerability written in python. Confluence version 6.12.3, 6.13.3, 6.14.2, and 6.15.1 are affected. The exploit requires working credentials. To use Edit the osusername and ospassword fields, and possibly the...

Automation-for-Juniper-cve-2023-36845

Automatización para Juniper CVE:2023-36845 Resumen es un script bash diseñado para verificar la vulnerabilidad CVE-2023-36845. Este script procesa una lista de direcciones IP, envía una solicitud a cada una y determina si el sistema es vulnerable según la respuesta. Uso Para usar el script,...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

CVE-2024-6387

CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...

CVE-2024-38077

CVE-2024-38077 Here’s a possible GitHub description for CVE-2024-38077: CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service Overview: CVE-2024-38077 is a critical vulnerability in the Windows Remote Desktop Licensing Service, which allows remote attacke...

CVE-2022-21907

CVE-2022-21907 Description root@kitploit: POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail root@kitploit: HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to...

EUVD-2026-72373

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80133

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc A proof-of-concept exploiting an unauthenticated remote code execution via the admin panel's PHP console feature in MajorDomo Major Domestic Module. Vulnerability MajorDoMo's admin panel exposes a PHP evaluation console via /admin.php. Due to a missing exit after an...

CVE-2026-14483

CVE-2026-14483 — WPL Real Estate RCE Unauthenticated remote code execution against the Realtyna WPL Real Estate Listing WordPress plugin...

cve-2020-0796

Identificación y mitigación de la vulnerabilidad CVE-2020–0796 sobre la marcha CVE-2020–0796 es una vulnerabilidad de ejecución remota de código previa que reside en el protocolo de comunicación de red Server Message Block 3.0 SMBv3, el cual Microsoft no abordará como parte del martes de parches ...

f5_rce_poc

Uso root@kitploit: python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 El efecto es el siguiente: root@kitploit: python3 f5rce.py -u 127.0.0.1 --ssrf Después de ejecutar el comando, ingrese exit para salir PD: La salida no es lo suficientemente estética, lo modificaré 😁...

PoC-CVE-2025-26529

PoC para CVE-2025-26529 – Exploit de XSS a RCE en Moodle Esta es una Prueba de Concepto PoC que demuestra la cadena de vulnerabilidades SSRF a XSS → XSS a RCE en Moodle. Resumen He subido todos los archivos necesarios para demostrar la cadena completa de explotación: 1. SSRF a XSS 2. Capturando l...