270250 matches found
Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725
CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...
CVE-2026-58138
CVE-2026-58138 — Conductor 3.21.21..3.30.2 Unauthenticated Remote Code Execution Critical Remote Code Execution Vulnerability in Orkes Conductor 📋 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE vulnerability affecting Orkes Conductor versions 3.21.21 through 3.30....
CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-
CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNING : This script is for educational purposes and testing in authorized environments only. Unauthorized use is prohibited and may be illegal. 📋 Description...
CVE-2025-49071
CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...
CVE-2026-64638-PoC-Exploit
🌀 CVE‑2026‑64638 – WordPress XSS2Shell Security Suite ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse...
CVE-2026-25643-Frigate-RCE
CVE-2026-25643: Frigate NVR = 0.16.3 Authenticated RCE Exploit Title: Frigate NVR = 0.16.3 - Authenticated Remote Code Execution Date: 2026-02-05 Exploit Author: jduardo2704 Vendor Homepage: https://frigate.video/ Software Link: https://github.com/blakeblackshear/frigate Version: = 0.16.3 CVE:...
CVE-2015-6967
CVE-2015-6967 An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed. Requirements optparse, signal, requests Usage root@kitploit: python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell...
RCE-QloApps-CVE-2024-40318
RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...
MAL-008
MAL-008: SSHtranger Things CVE-2019-6111, CVE-2019-6110 in Cisco SD-WAN Cisco SD-WAN v20.4.2.1 uses an old version of SSH OpenSSH7.6p1 that is susceptible to the “SSHtranger Things” attack. If a victim tries to connect to a malicious/compromised SSH server this attack may be used to write/overwri...
CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-
CVE-2025-49132 Pterodactyl Panel - Unauthenticated Remote Code Execution RCE 🔎 Summary CVE‑2025‑49132 is a critical Remote Code Execution vulnerability affecting Pterodactyl Panel = 1.11.10. An unauthenticated attacker can exploit improper input validation in the /locales/locale.json endpoint to...
CVE-2026-2035703-x300
CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...
log4j
ثغرة Log4J Zero-Day تجميع لنتائج OSINT الخاصة بـ log4j، بما في ذلك الاكتشاف، وسطح الهجوم، والتخفيف، ومؤشرات الاختراق IoCs. I. نظرة عامة ملخص تتيح هذه الثغرة الأمنية لأي مهاجم يمكنه حقن نص في رسائل السجلات أو معاملات رسائل السجلات في سجلات الخادم، تحميل كود من خادم بعيد. ثم يقوم الخادم المستهدف...
CVE-2024-10728
CVE-2024-10728 PostX var ultpoptionpanel =...
CVE-2019-18655
CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0. CVE summary: File Sharing Wizard version 1.5.0 is affected of Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution a...
CVE-2025-55182_full_exploit
CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...
CVE-2026-4885
CVE-2026-4885 Piotnet Addons for Elementor Pro = 7.1.70 - Unauthenticated Arbitrary File Upload → RCE Description : The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the pafeajaxformbuilder function in all...
CVE-2026-21858
CVE-2026-21858 n8n वर्कफ़्लो स्वचालन प्लेटफ़ॉर्म - रिमोट कोड निष्पादन CVE-2026-21858 का पता लगाने के लिए एक सुरक्षा अनुसंधान उपकरण, जो n8n वर्कफ़्लो स्वचालन प्लेटफ़ॉर्म में एक गंभीर रिमोट कोड निष्पादन भेद्यता है। विषय-सूची भेद्यता सारांश प्रभावित संस्करण तकनीकी विश्लेषण पूर्वापेक्षाएँ स्थापना उपय...
CVE-2025-3248
توثيق أداة استغلال الثغرة CVE-2025-3248 مقدمة هذه الأداة مُصمَّمة لاستغلال الثغرة CVE-2025-3248 ثغرة حقن كود Python، من خلال إنشاء حمولة ضارة payload لتحقيق تنفيذ أوامر عن بُعد RCE على الخادم الهدف. توجد الثغرة في واجهة برمجة تطبيقات API لتطبيق ويب معين، حيث يمكن للمهاجم استغلال نقطة تنفيذ كود غي...
CVE-2021-3129
CVE-2021-3129 Laravel RCE CVE-2021-3129 परीक्षण वातावरण root@kitploit: mkdir CVE-2021-3129-docker cd CVE-2021-3129-docker wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml docker compose up -d उपयोग root@kitploit: git clone...