271719 matches found
CVE-2022-22965
spring4shell ⭐ a python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. the script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerabili...
CVE-2023-25581
This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code RCE by deserializing maliciously crafted Base64-encoded data. Prerequisites Before running the script, make sure you have the followin...
wongpress
Explotación en un Caso Real de Desbordamiento de Búfer y Vulnerabilidades de Cadena de Formato para Obtener RCE en un Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidad de desbordamiento de búfer en la función iconv de Glibc CVE-2024-29510 : Vulnerabilidad de cadena de formato en...
internet-of-vulnerable-things
Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...
CVE-2018-15961
CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...
CVE-2025-59528.yaml
CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...
Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911
Rocket.Chat: Toma de control de cuenta no autenticada automatizada para RCE CVE-2021-22911 Prueba de concepto completa de RCE no autenticado para Rocket.Chat 3.12.1 CVE-2021-22911 El PoC original creado por Enox. Actualmente esto solo funciona para cuentas sin 2FA. Pronto añadiré bypasses de 2FA...
CVE-2022-26809-RCE
CVE-2022-26809-RCE CVE-2022-26809-RCE https://satoshidisk.com/pay/CFGspB...
CVE-2026-85384
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-66302
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
CVE-2026-49919
In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49879
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-49882
In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28662
In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28609
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28618
In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28604
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-0781
CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...