273767 matches found
Nuclei-Template-CVE-2024-50379
Nuclei-Template-CVE-2024-50379 Beschreibung Diese Nuclei-Vorlage erkennt Apache Tomcat-Server, die anfällig für die TOCTOU-Race-Condition sind, die eine Remote Code Execution RCE ermöglicht. ⚠ Wichtiger Hinweis : Diese Vorlage darf ausschließlich zu Bildungszwecken und in kontrollierten Umgebunge...
CVE-2022-22963_Reverse-Shell-Exploit
Exploit Reverse Shell CVE-2022-22963 Questo è uno script Python che sfrutta CVE-2022-22963, una vulnerabilità di esecuzione di codice in remoto in Spring Cloud Function che consente agli attaccanti di eseguire codice arbitrario su un server vulnerabile. L'exploit utilizza l'endpoint vulnerabile...
s2-048
s2-048 Exp per s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...
CVE-2019-5544_CVE-2020-3992
Scanner per servizi SLP CVE-2019-5544 CVE-2020-3992 Script Python che implementa il protocollo SRVLOC/SLP per scansionare i servizi OpenSLP abilitati. Può risultare utile durante la ricerca di sistemi colpiti da CVE-2019-5544, CVE-2020-3992 o CVE-2021-21974 ... Maggiori informazioni sulla...
fusionpbx_rce_vulnerability
مقدمة يحاول هذا الكود البسيط إكمال تنفيذ الثغرة المتسلسلة التي قدمها Dustin Cobb في مقال RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE خطوات إعادة الإنتاج 1. اعرض شاشة المشغل الضعيفة في متصفح ويب، والموجودة في هذا المثال على الرابط...
CVE-2021-21014
PoC Limitado CVE-2021-21014 As versões 2.4.1 e anteriores, 2.4.0-p1 e anteriores e 2.3.6 e anteriores do Magento são vulneráveis a um bypass de restrição de upload de arquivos. Uma exploração bem-sucedida pode levar à execução arbitrária de código por um atacante autenticado. Versão afetada: =...
CVE-2017-7494_IT19115344
CVE-2017-7494IT19115344 Una vulnerabilità di esecuzione remota di codice è stata trovata in Samba. Un client samba autenticato malintenzionato, con accesso in scrittura alla condivisione samba, potrebbe utilizzare questa vulnerabilità per eseguire codice arbitrario come root...
CVE-2026-76034
A flaw was found in Chromium's WebGL component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox, allowing the attacker to gain control over the affected syste...
CVE-2026-76047
A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...
CVE-2026-76035
A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...
Vulnerabilities found in Oracle Communications
Oracle has identified vulnerabilities in various communication modules, including Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search, and Oracle Communications Unified Inventory Management. These vulnerabilities include stack-based buffer overflows,...
Vulnerabilities in Oracle Fusion Middleware
Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...
CVE-2026-76046
A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...
OHTS
OHTS CVE-2017-8759 | Sicherheitslücke im .NET Framework bei der Remotecodeausführung 1. Einleitung Eine Sicherheitslücke bei der Remotecodeausführung besteht, wenn Microsoft .NET Framework nicht vertrauenswürdige Eingaben verarbeitet. Ein Angreifer, der diese Sicherheitslücke in Software, die das...
CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis
Dieses Repository hat keine README-Datei...
CVE-2019-16278-Nostromo-1.9.6-RCE
CVE-2019-16278-Nostromo-1.9.6-RCE Este é um exploit do CVE-2019-16278 para Nostromo 1.9.6 RCE. Este exploit permite RCE na máquina vítima. Requisitos optparse socat sys Uso Você pode usar o exploit da seguinte forma: root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80...
CVE-2020-11108-PoC
CVE-2020-11108-PoC इस रिपॉजिटरी में दो PoCs हैं। cve-2020-11108-rce.py आपको www-data उपयोगकर्ता के रूप में एक शेल देगा। root-cve-2020-11108-rce.py आपको एक शेल देगा और विशेषाधिकारों को root तक बढ़ाएगा। नोट: यह विनाशकारी है क्योंकि हमें teleporter.php को ओवरराइट करना होगा। पूर्ण विवरण/राइटअप के लिए...
CVE-2021-32305-websvn-2.6.0
CVE-2021-3205-websvn-2.6.0 Dies ist ein Exploit für CVE-2021-3205, eine Websicherheitslücke zur Befehlseinschleusung im search.php-Pfad. Dieser Exploit ermöglicht die Ausführung von Befehlen. Anforderungen optparse, signal, requests Verwendung root@kitploit: ❯ python3 CVE-2021-3205.py --url...
BIT-POSTGRESQL-2026-14680 PostgreSQL type confusion via "internal" arguments
Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type "internal" represents a class of mutually-incompatible data structures not intended for...