CVE-2026-39938

Schwachstellenbericht: Cacti Unauthenticated RCE auf Graph Image Forscher: K | Produkt: Cacti ≤ 1.2.30 | CVE: CVE-2026-39938 01 Zusammenfassung der Schwachstelle Feld| Wert ---|--- Produkt| Cacti — Die komplette RRDtool-basierte Grafiklösung Betroffene Versionen| ≤ 1.2.30 Schwachstellenklasse|...

CVE-2022-26134

CVE-2022-26134 Am 30. Mai 2022 identifizierte eine Organisation namens Volexity eine nicht authentifizierte RCE-Schwachstelle mit einer Bewertung von 9.8 auf NIST in den Editionen Confluence Server und Data Center von Atlassian Verwundbare Version 7.18.1 Ausführen root@kitploit: python -m venv ve...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Ferramenta automática em massa para verificar vulnerabilidade no CVE-2022-4060 - Plugin WordPress: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

CVE-2020-14882

CVE-2020-14882: Deployare webshell in memoria di Behinder Come noto, CVE-2020-14882 è una vulnerabilità di autorizzazione non autenticata che consente a un attaccante di eseguire codice arbitrario su un server WebLogic vulnerabile. I PoC pubblici online sfruttano caratteri illegali per bypassare...

VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMwarevCenterUNAuthorizedRCECVE-2021-21972 zoomeye dork：app:"VMware vCenter" Script de detecção inofensivo escrito com pocsuite3 VMwarevCenterUNAuthorizedRCE.py, detectando usando dados do último ano: Taxa de sucesso é aproximadamente: 1551 / 3998 = 39%...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Failed to change password : The current password is incorrectuid=0root gid=0root groups=0root...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Scanner Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – Tutti i diritti riservati Autorizzato da CYBERDUDEBIVASH AUTHORITY – Strumento di rilevamento etico per CVE-2025-20393 RCE non autenticata in Cisco Secure Email Gateway / SMA. Questo strumento aiuta ...

CVE-2024-7954

CVE-2024-7954 यह एक्सप्लॉइट SPIP लक्ष्यों पर सिस्टम कमांड निष्पादित करने का प्रयास करेगा CVE-2024-7954। अवलोकन यह CVE-2024-7954 के लिए बल्क स्कैनिंग और एक्सप्लॉइटेशन टूल है: SPIP 4.2.8 अनधिकृत हमलावरों को SPIP लक्ष्यों पर RCE लॉन्च करने की अनुमति देता है। यह टूल इस सुरक्षा अनुसंधान पर आधारित है।...

CVE-2025-32433-PoC

CVE-2025-32433: PoC di RCE non autenticata su Erlang/OTP SSH Questo repository contiene una Proof-of-Concept PoC per la CVE-2025-32433, una vulnerabilità critica di Remote Code Execution RCE non autenticata che interessa l'implementazione del server SSH in Erlang/Open Telecom Platform OTP. Questa...

TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 Un laboratorio interattivo che mostra la vulnerabilità RCE non autenticata di Confluence Server e Data Center. Attività 1 Introduzione Confluence | Your Remote-Friendly Team Workspace | Atlassian NV...

CVE-2024-1212

CVE-2024-1212 - Injeção de Comando Não Autenticada no Progress Kemp LoadMaster Este é um script de exploit para CVE-2024-1212 , uma vulnerabilidade de injeção de comando não autenticada no Progress Kemp LoadMaster. Resumo da Vulnerabilidade CVE-2024-1212 afeta o Progress Kemp LoadMaster ,...

CVE-2025-13597

AI Feeds = 1.0.11 - رفع ملف تعسفي غير مصادق عليه يحتوي إضافة ووردبريس AI Feeds في الإصدارات 1.0.11 وما دون على ثغرة تنفيذ تعليمات برمجية عن بُعد غير مصادق عليها في ملف actualizadorgit.php. يمكن الوصول إلى هذا الملف مباشرة عبر HTTP دون أي تحقق من المصادقة أو التفويض، مما يسمح للمهاجمين غير المصادق...

CVE-2024-11635

WordPress File Upload Questo README documenta una vulnerabilità divulgata esclusivamente per scopi educativi e difensivi.Non eseguire test su sistemi di produzione o sistemi di cui non sei proprietario o per i quali non hai esplicita autorizzazione. Scoperto da: abrahack Stato: Divulgazione...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Une SSTI non authentifiée dans le Rejetto HTTP File Server HFS. PoC du découvreur original : https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Testé sur les versions : 2.4.0 RC7, 2.3m Exemple d'utilisation : root@kitploit: msf6 use...

CVE-2025-13595

CIBELES AI = 1.10.8 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड Cibeles AI WordPress प्लगइन के संस्करण 1.10.8 और उससे नीचे में actualizadorgit.php फ़ाइल में एक बिना प्रमाणीकरण वाली रिमोट कोड निष्पादन भेद्यता मौजूद है। यह फ़ाइल बिना किसी प्रमाणीकरण या प्राधिकरण जांच के HTTP के माध्यम से सीधे एक्सेस की...

CVE-2026-45018 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...

CVE-2026-45018

Chainlit (Python framework for conversational AI applications) is vulnerable to command injection via its MCP stdio transport in versions 2.4.0rc0 through 2.12.0 . When features.mcp.enabled is set to true, the POST /mcp endpoint is exposed without authentication . The validate_mcp_command() funct...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — Plugin Backup Migration per WordPress - Reverse Shell Una versione estesa dell'exploit CVE-2023-6553 di Chocapikk che aggiunge una modalità reverse shell con un solo comando alla webshell interattiva originale. Vulnerabilità CVE-2023-6553 — Esecuzione remota di codice non...

CVE-2025-20281-2-Cisco-ISE-RCE

CVE-2025-20281-2-Cisco-ISE-RCE Nicht authentifizierter Python-PoC für CVE-2025-20281 RCE gegen die Cisco ISE API CVE-2025-20281 Unauthentifizierter PoC Ein minimaler Python-Proof-of-Concept, der die nicht authentifizierte RCE in der ERS-API von Cisco ISE CVE-2025-20281 ausnutzt, indem beliebige...

CVE-2024-23692-RCE-in-Rejetto-HFS

Nicht authentifizierte RCE-Schwachstelle im Rejetto HTTP File Server CVE-2024-23692 - Exploit-Code CVE-2024-23692 ist eine kritische Sicherheitslücke im Rejetto HTTP File Server HFS Version 2.3m, die eine nicht authentifizierte entfernte Codeausführung RCE ermöglicht. Dieser Fehler ermöglicht es...