991670 matches found
CVE-2019-2725
CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 costruttore di payload & exploit Info / Aiuto root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal...
CVE-2018-7600
Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Installa le librerie richieste con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTI...
sample-ldap-exploit
sample-ldap-exploit Eine kurze Demo von CVE-2021-44228 Erstellen root@kitploit: $ mvn clean verify Angreifer ausführen root@kitploit: $ java \ -cp 'attacker/target/sample-attacker.jar:attacker/target/lib/' \ sample.attacker.Attacker localhost 1389 sample.payload.Payload 8080...
CVE-2026-76640
Unitree G1 EDU firmware through 1.5.2 contains chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow an unauthenticated proximate attacker to achieve root code execution (uid 0) without pairing or credentials. The root cause involves an unquoted heredoc variable in...
CVE-2026-76640 Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack
Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unquoted heredoc variable in the WiFi...
CVE-2022-1565
Plugin WordPress WP All Import = 3.6.7 - Esecuzione di codice da remoto RCE Autenticato root@kitploit: Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm:...
EUVD-2026-67165
Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...
Worpress-CVE-2023-5360
CVE-2023-5360 CVE-2023-5360 Upload Automático de Shell WordPress Royal Elementor 1.3.78 Upload de Shell Visite https://phankz.com...
Oracle-WebLogic-CVE-2017-10271
Oracle-WebLogic-CVE-2017-10271 WebLogic wls-wsat RCE CVE-2017-10271 Descrizione della vulnerabilità All'inizio, gli hacker hanno sfruttato la vulnerabilità del componente WLS di WebLogic per lanciare attacchi remoti su larga scala contro i server aziendali. Un gran numero di server aziendali è...
ace-vim-neovim
ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen root@kitploit: nc -vlp 9999 2. ace root@kitploit: vim pocshell.txt And then, your localhost will get shell...
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...
CVE-2020-17533
Recentemente, è stata scoperta una vulnerabilità di esecuzione remota di codice in Apache Struts2 ID CVE: CVE-2020-17530. Il framework Apache Struts2 è un framework Web utilizzato per lo sviluppo di applicazioni di rete Java EE. Essendo ampiamente utilizzato, la portata dell'impatto della...
EUVD-2026-67163
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...
CVE-2026-48996 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...
CVE-2026-48996 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...
CVE-2026-48996
Trilium (open-source hierarchical note-taking app) versions up to 0.103.0 are affected by a vulnerability where the default "Safe import" filter fails to sanitize note titles. The GeoMap view interpolates a marker note's title into raw HTML rendered via innerHTML, so an attacker-crafted import ar...
Samsung-CVE-2025-21042
🔐 CVE-2025-21042 — Esecuzione di codice remoto nel codec immagini Samsung ⚙️ Cos'è Una vulnerabilità critica nella libreria di elaborazione immagini di Samsung libimagecodec.quram.so — utilizzata sui dispositivi Galaxy Android. 🧩 È un difetto di scrittura fuori dai limiti out-of-bounds write...
CVE-2024-38063
CVE-2024-38063 Visão Geral Em agosto de 2024, a Microsoft lançou uma correção para uma vulnerabilidade de Execução Remota de Código RCE no TCP/IP do Windows. Alguns pesquisadores já publicaram Provas de Conceito PoC para esta vulnerabilidade e, aproximadamente ao mesmo tempo, os pesquisadores da...
CVE-2023-3519
ثغرة RCE في Citrix ADC CVE-2023-3519 يستخدم هذا الاستغلال عناوين وشيلكود لإصدار Citrix VPX 13.1-48.47. للاطلاع على الشرح الكامل، انقر هنا. الاستخدام يلزم وجود NASM لبناء الشيلكود. root@kitploit: $ sudo apt install nasm الشيلكود المضمن سيقوم بتنزيل وتشغيل سكربت شل من خادم https بعيد. يأخذ السكربت ...