CVE-2017-14980.RCE

CVE-2017-14980 L'exploit ha come bersaglio Sync Breeze Enterprise in esecuzione su Windows 10 x86, build: 16299 , colpendo la versione 10.0.28 , dove un attaccante non autenticato può eseguire un buffer overflow tramite il corpo di una richiesta HTTP , causando esecuzione di codice arbitrario...

CVE-2025-55182

CVE-2025-55182 - Exploit RCE per React Server Components Exploit CLI in Python per CVE-2025-55182, una vulnerabilità RCE critica in React Server Components tramite react-server-dom-webpack. Basato su: ejpir/CVE-2025-55182-poc Avvio rapido Test con Docker Unpack src.zip zip -r src.zip src Build an...

cve-2021-41773-exploration

Panoramica CVE-2021-41773 è una vulnerabilità di path traversal scoperta in Apache HTTP Server 2.4.49 nell'ottobre 2021. La causa principale è stata un errore nella normalizzazione delle sequenze di punti finali nell'URL prima di verificare che il percorso richiesto rimanesse all'interno della ro...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType Exploit del Generatore di Font Variabili Questo repository contiene un exploit specializzato per la macchina VariaType su Hack The Box. L'exploit sfrutta una vulnerabilità nel modo in cui la libreria fontTools o l'applicazione web gestisce i file XML .designspace ...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Indagine su un tentativo di command injection PAN-OS CVE-2024-3400 Panoramica Questo progetto documenta l'indagine su un tentativo di command injection CVE-2024-3400 rivolto a un servizio PAN-OS GlobalProtect. L'obiettivo era determinare: se si tratti di un attacco reale se l'esecuzione di comand...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Usa i seguenti comandi per compilare ed eseguire l'ambiente Langflow vulnerabile: docker build -t...

CVE-2025-32432-exploit-by-P34NUT

CVE-2025-32432 — Exploit RCE Pre-Auth per Craft CMS Autore: P34NUT2 Vulnerabilità: Remote Code Execution Pre-Autenticato in Craft CMS CVE: CVE-2025-32432 Target: Qualsiasi istanza vulnerabile di Craft CMS 3.x / 4.x / 5.x — testato su Hack The Box: Orion ⚠️ Disclaimer Questo strumento è fornito...

CVE-2025-25347

CVE-2025-25347 Panoramica Questo strumento viene utilizzato per testare la vulnerabilità CVE-2025-25347 su QingLong Panel, una piattaforma open-source per la gestione dell'automazione delle attività. Questa vulnerabilità consente Remote Code Execution RCE poiché il pannello non applica una...

Ghost: Remote Code Execution via Bookmark Card Images

Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. Vulnerable versions This...

GHSA-788W-68H3-CVXP Ghost: Remote Code Execution via Bookmark Card Images

Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. Vulnerable versions This...

NPM: Ghost: Remote Code Execution via Bookmark Card Images

NPM: Ghost: Remote Code Execution via Bookmark Card Images vulnerability discovered by ? in WordPress Npm ghost versions = 6.56.0, 6.67.0...

CVE-2025-55182

CVE-2025-55182 Regole di rilevamento basate su host per la vulnerabilità RCE nel framework JavaScript React...

Payload: Remote Code Execution through first-register

Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. You are affected if: - You use local auth strategy and your application remains without an initial user created Patches In the patched version data submission to create first user is properly...

EUVD-2026-93502

Payload: Remote Code Execution through first-register...

GHSA-97RH-RHH2-7VJV Payload: Remote Code Execution through first-register

Impact A crafted request to the public first-register operation can be used to perform a RCE exploit. You are affected if: - You use local auth strategy and your application remains without an initial user created Patches In the patched version data submission to create first user is properly...

NPM: Payload: Remote Code Execution through first-register

NPM: Payload: Remote Code Execution through first-register vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

EUVD-2026-93501

Payload Form Builder has an RCE issue...

Payload Form Builder has an RCE issue

Impact A vulnerability in @payloadcms/plugin-form-builder in versions = 3.90.0 or = 4.0.0-canary.34...

Ghost: Remote Code Execution via Theme Translation Files

Impact A vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. Vulnerable versions This vulnerability is present in Ghost from v6.10.3 up to v6.64.0. Patches v6.64.0 contains a fix for this issu...

GHSA-JJ74-HC2Q-XRVM Ghost: Remote Code Execution via Theme Translation Files

Impact A vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. Vulnerable versions This vulnerability is present in Ghost from v6.10.3 up to v6.64.0. Patches v6.64.0 contains a fix for this issu...