270321 matches found
CVE-2025-68613-n8n-rce-analysis
ćććŖććÆć¹GIF š ē®ę¬”...
cve-2025-55182-node
CVE-2025-55182 Next.js RCE ę¼ę“å©ēØå·„å · English | ę¼ę“åēåę !CAUTION ā ļø å č“£å£°ę - ä½æēØååæ čÆ» ę¬å·„å ·ä» ä¾ä»„äøēØéä½æēØļ¼ å®å Øē ē©¶äŗŗåčæč”ę¼ę“éŖčÆ č·å¾ęē”®ęęēęøéęµčÆ ęč²åå¦ä¹ ē®ē ęŖē»ęęč®æé®č®”ē®ęŗē³»ē»ęÆčæę³č”äøŗļ¼ ä½æēØę¬å·„å ·å³č”Øē¤ŗęØåęļ¼ 1. åØęµčÆä»»ä½ē³»ē»ä¹åå·²č·å¾éå½ęę 2. äøä¼å°ę¬å·„å ·ēØäŗę¶ęē®ē 3. ęØåƹčŖå·±ēč”äøŗåå ¶åęęæę å ØéØč“£ä»» ä½č åƹę¬å·„å ·ē껄ēØäøęæę ä»»ä½ę³å¾č“£ä»»ć Next.js ęå”ē«Æååę±”ęåƼč“ēčæēØ代ē ę§č”ę¼ę“å©ēØå·„å ·ć ę¼ę“ę¦čæ° CVE-2025-55182 ęÆäøäøŖå½±å Next.js...
CVE-2026-44262
dedoc/scramble RCE CVE-2026-44262 PoC š ęčæ° CVE-2026-44262 ęÆ dedoc/scrambleļ¼äøäøŖ Laravel API ęę”£ēęåØļ¼äøēäøäøŖęŖ认čÆčæēØ代ē ę§č”ę¼ę“ć NodeRulesEvaluator::doEvaluateExpression ä¼åØ eval"return $code;" ä¹åč°ēØ extract$variablesćå½ę§å¶åØå° čµå¼ē»åäøŗ ēåé并å°å ¶ēØä½éŖčÆč§åę¶ļ¼Scramble ä¼č·čøŖčÆ„åé并å°å ¶ä¼ å „ eval ä½ēØåćę»å»č åÆ仄éčæå ęä¾ē¹å¶ēę„čÆ¢åę°ļ¼ä½æēØä»»ę PHP č¦ē ć...
CVE-2025-48384-main
CVE-2025-48384 ē PoC čæęÆäøäøŖ POCćčÆ·åæåØäøå®å ØēēÆå¢äøäøč½½å®ćå®ä¼č®©é»å®¢åØä½ ēęŗåØäøčæēØę§č”代ē åč§ CVE-2025-48384 čæč”ļ¼ root@kitploit: git clone --recurse-submodules [email protected]:zr0n/CVE-2025-48384-main.git č¢«ę§č”ē payload ä½äŗę¤å¤ć...
CVE-2023-46818
CVE-2023-46818 - ISPConfig PHP 代ē ę§č” | ę¼ę“å©ēØ ISPConfig é«å±čæēØ代ē ę§č”ę¼ę“ PoC å®ē°ć ęč¦ ISPConfig ēę¬ /admin/languageedit.php ā ISPConfig ę¼ę“ē«Æē¹ š čæč”ę¼ę“å©ēØ čæč”ę¼ę“å©ēØčę¬ CVE-2024-47533.pyć root@kitploit: python3 CVE-2023-46818.py -u -U -P š» ęåč·åčæēØ Shell č®æé® ęåę§č”åļ¼åå shell å°åčæå°ę»å»č ēęŗåØļ¼ä½æę»å»č č·å¾åƹęå”åØēčæēØč®æé®ęéć...
CVE-2025-49113_exploit_cookies
CVE-2025-49113 - Vulnerabilidad de EjecuciĆ³n Remota de CĆ³digo en Roundcube Webmail Resumen TĆ©cnico CVE-2025-49113 es una vulnerabilidad crĆtica de deserializaciĆ³n insegura en Roundcube Webmail que permite la ejecuciĆ³n remota de cĆ³digo autenticada. La vulnerabilidad se origina por un manejo...
CVE-2025-61765_PoC
ęč¦ python-socketio 5.14.0 ä¹åēēę¬ååØäøäøŖčæēØ代ē ę§č”ę¼ę“ļ¼åØę»å»č å åå·²č·å¾ęå”åØå éØéäæ”ęēØę¶ęÆéåč®æé®ęéēå¤ęå”åØéØē½²äøļ¼ę»å»č åÆéčæę¶ę pickle ååŗååę§č”ä»»ę Python 代ē ć ęØåÆ仄åØ GitHub Advisory äøę¾å°ę¤ę¼ę“ēčƦē»åęć čæč” ę¤ę¼ē¤ŗę¶åäøäøŖ docker 容åØļ¼ 1. Redis ęå”åØ ļ¼å å½ę¶ęÆ代ēć 2. ęåę»å»ē Socket.IO ęå”åØ ļ¼äøäøŖåŗäŗ Flask ēęå”åØļ¼ä½æēØ python-socketio å¤ē WebSocket čæę„ļ¼å¹¶éčæ Redis čæč”éäæ”ć 3. ę»å»č 客ę·ē«Æ...
coolify-cve-2025-66209-66213
Coolify ć»ćć„ćŖćć£ć¢ććć¤ć¶ćŖ - CVE-2025-66209 ćć CVE-2025-66213 å ±åč : 0xrakan ćć³ćć¼: coollabsio/coolify å½±éæćåćććć¼ćøć§ć³: v4.0.0-beta.451 äæ®ę£ęøćæćć¼ćøć§ć³: v4.0.0-beta.451 éč¦åŗ¦: é大 CVSS 9.4 ę¦č¦ Coolify ć«ććć¦ćć¢ććŖć±ć¼ć·ć§ć³/ćµć¼ćć¹ē®”ēęØ©éćęć¤čŖčؼć¦ć¼ć¶ć¼ćē®”ēćµć¼ćć¼äøć§ root ćØćć¦ä»»ęć®ć³ćć³ććå®č”ć§ććć5...
CVE-2024-47533
CVE-2024-47533 - Cobbler XMLRPC 认čÆē»čæčæēØ代ē ę§č”ę¼ę“å©ēØ Cobbler äøéčæ认čÆē»čæēäø„éčæēØ代ē ę§č”ę¼ę“ PoC å®ē°ć ę¦čæ° Cobbler ęÆäøäøŖ Linux å®č£ ęå”åØļ¼č½å¤åæ«éč®¾ē½®ē½ē»å®č£ ēÆå¢ļ¼åØ 3.0.0 č³ 3.2.3ļ¼äøå«ļ¼å 3.3.7ļ¼äøå«ļ¼ēę¬äøååØäøäøŖ认čÆę¼ę“ćå½ę° utils.getsharedsecret å§ē»čæå -1ļ¼å č®øä»»ä½äŗŗä½æēØē©ŗēØę·å '' ååÆē -1 čæę„å° Cobbler XML-RPC ę„å£ćčæä½æå¾å ·ęē½ē»č®æé®ęéēę»å»č č½å¤å®å Øę§å¶ Cobbler ęå”åØćčÆ„ę¼ę“å·²åØ 3.2.3 å 3.3.7...
CVE-2025-6440
CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - čŖčؼćŖćä»»ęćć”ć¤ć«ć¢ćććć¼ć čŖ¬ę WordPressćć¼ććPricom - Printing Company & Design Servicesćć§ä½æēØćććWordPressćć©ć°ć¤ć³ćWooCommerce Designer...
pyrocms-ssti-fix
š”ļø PyroCMS SSTI Fix éåƹ CVE-2023-29689 ēå³č£ å³ēØå®å Øäæ®å¤ āāäæ®å¤ PyroCMS 3.9 äøēęå”åØē«ÆęØ”ęæę³Øå „ļ¼SSTIļ¼ę¼ę“ļ¼čÆ„ę¼ę“åÆåƼč“čæēØ代ē ę§č”ć é®é¢ PyroCMS å č®øē®”ēåēØę·ē¼č¾ååØåØę°ę®åŗäøēęØ”ęæćåØę²”ęę²ē®±éē¦»ēę åµäøļ¼ę„ęē®”ēåęéēę»å»č åÆ仄ę³Øå „ę¶ęē Twig 代ē ļ¼ root@kitploit: 'id'|map'system'|join čæä¼ę§č”ä»»ęē³»ē»å½ä»¤ćäøęøøē»“ę¤č 认äøŗčæāē¬¦åé¢ęč®¾č®”āļ¼å äøŗē®”ēåēØę·ęÆåäæ”ä»»ēāāä½åØå¤ē§ę·ęä¼äøēÆå¢äøļ¼āē®”ēåāā āåÆč¢«äæ”ä»»ęäŗ Shell č®æé®ęéāć č§£å³ę¹ę”...
CVE-2025-24893-PoC
CVE-2025-24893-PoC Exploit de RCE no autenticado en XWiki Versiones de XWiki afectadas Versiones 15.10.11 Versiones 16.4.1 Versiones 16.5.0RC1 DescripciĆ³n de la vulnerabilidad Las versiones afectadas de XWiki contienen una vulnerabilidad de EjecuciĆ³n Remota de CĆ³digo causada por el manejo insegur...
CVE-2021-44228-playground
LOG4SHELL-CVE-2021-44228-Validator Acerca de Esta herramienta le permite verificar si una aplicaciĆ³n web Java simple es vulnerable a CVE-2021-44228 para una versiĆ³n de Java y Log4J proporcionada por el usuario. TambiĆ©n puede opcionalmente aplicar una de las mitigaciones predefinidas. El laborator...
CVE-2026-47117-openmed-rce
CVE-2026-47117: OpenMed éčæ PII ęØ”åå č½½å®ē°ęŖ认čÆčæēØ代ē ę§č” äø„éę§ļ¼ äø„éļ¼CVSS 4.0 9.3 ļ¼CVSS 3.1 9.8 ļ¼ē± VulnCheckļ¼CNAļ¼čÆå®ļ¼ åéļ¼v4.0ļ¼ļ¼ CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N åéļ¼v3.1ļ¼ļ¼ CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H åå½±åēę¬ļ¼ OpenMed 1.5.2 äæ®å¤ēę¬ļ¼ 1.5.2 CWEļ¼ CWE-94ļ¼åƹ代ē ēęēéčÆÆę§å¶ļ¼ä»£ē ę³Øå „ļ¼ ę„åč ...
CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit
š ReactRCE-Scanner CVE-2025-55182 ā Advanced React Server Components RCE Exploit & Assessment Framework...
CVE-2021-41773
CVE-2021-41773 ā Apache HTTP Server 2.4.49 Path Traversal & RCE ā ļø For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA ā Offensive...
teamcity-CVE-2026-63077-pcap
teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...
abdal-cve-2026-63030
English | ŁŲ§Ų±Ų³Ū š”ļø Abdal CVE-2026-63030 PoC Exploits Abdal CVE-2026-63030 is a defensive WordPress exposure verifier for the REST API batch route confusion tracked as CVE-2026-63030. The issue can be chained with CVE-2026-60137 on affected WordPress releases and may lead to remote code execution...
abdal-cve-2026-60137
English | ŁŲ§Ų±Ų³Ū š”ļø Abdal CVE-2026-60137 PoC Exploits Abdal CVE-2026-60137 is a defensive WordPress exposure verifier for the insufficient sanitization of the authornotin parameter in WPQuery, tracked as CVE-2026-60137. The vulnerability can allow SQL injection when untrusted input reaches the...