CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

EUVD-2026-67085

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2023-22906

CVE-2023-22906 CVE-2023-22906 è una vulnerabilità critica che colpisce il dispositivo Hero Qubo Smart Doorbell con versione HCD0102V1.3820220125. Questo dispositivo consente l'accesso Telnet con privilegi di root per impostazione predefinita, senza richiedere una password. Questa vulnerabilità...

POC-CVE-2025-55182

NoMoreBreach Advisory: React2Shell CVE-2025-55182 Schweregrad: Kritisch CVSS 10.0 Schwachstellentyp: Remotecodeausführung RCE durch Deserialisierung Status: Gepatcht 3. Dez. 2025 Quelle der Warnung: NoMoreBreach.com Zusammenfassung Das NoMoreBreach-Forschungsteam hebt eine kritische Schwachstelle...

cve-2025-5777

CitrixBleed2 - Scanner PoC para CVE-2025-5777 Este repositório contém um scanner avançado de Prova de Conceito PoC para a CVE-2025-5777 , apelidada de CitrixBleed2 , uma vulnerabilidade de divulgação de memória que afeta o Citrix NetScaler ADC e Gateway. Fiz algumas alterações no PoC original; es...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2011-2523

Exploit Backdoor vsftpd 2.3.4 Server FTP: vsftpd Versione vulnerabile: 2.3.4 CVE: CVE-2011-2523 Vulnerabilità: Backdoor sulla porta 6200 aperta quando l'utente inserisce stringhe aggiungendo : nel parametro USER di FTP Note: L'RCE non necessita di autenticazione...

CVE-2023-5360

CVE-2023-5360 Exploit di Upload File Elementor Il plugin WordPress Royal Elementor Addons and Templates precedente alla versione 1.3.79 non valida correttamente i file caricati, il che potrebbe consentire a utenti non autenticati di caricare file arbitrari, come PHP, e ottenere RCE. root@kitploit...

CVE-2024-34102

CVE-2024-34102 - Exploit XXE CosmicSting Exploit per CVE-2024-34102 CosmicSting - vulnerabilità XML External Entity XXE in Adobe Commerce e Magento. 📋 Informazioni sulla vulnerabilità CVE-2024-34102 è una vulnerabilità XXE critica che colpisce: Adobe Commerce versioni 2.4.7, 2.4.6-p5, 2.4.5-p7,...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit e writeup. Dettagli CVE-2022-29464 è una vulnerabilità critica su WSO2 scoperta da Orange Tsai. La vulnerabilità è un upload arbitrario di file non autenticato e senza restrizioni che consente a un attaccante non autenticato di ottenere RCE sui serve...

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – proof-of-concept exploit per NetScaler ADC/Gateway “memory bleed” CVE-2025-5777 è una critica lettura out-of-bounds non autenticata in Citrix NetScaler ADC/Gateway modalità Gateway o AAA vServer. Una singola richiesta artificiosa può scarica...

react-cve-2025-55182

CVE-2025-55182: React/Next.js Teste Status do Projeto: Experimental / Prova de Conceito Este repositório serve como um ambiente de pesquisa controlado e um framework de Prova-de-Conceito PoC para analisar CVE-2025-55182. Ele demonstra uma vulnerabilidade de Poluição de Protótipo no contexto de...

EUVD-2026-67083

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS-Client-Zertifikate aus macOS-Schlüsselbund-Version Go-Implementierung des CVE-2024-43468-Exploits, der den macOS-Schlüsselbund für die mTLS-Authentifizierung verwendet ohne dass Schlüssel aus dem Schlüsselbund exportiert werden müssen. Zusätzlich:...

CVE-2017-7269

CVE-2017-7269 - Overflow del buffer WebDAV di IIS 6.0 Un'implementazione in Rust del POC per CVE-2017-7269, che prende di mira il servizio WebDAV in Microsoft Internet Information Services IIS 6.0. Panoramica della vulnerabilità CVE-2017-7269 è una vulnerabilità critica di overflow del buffer...

CVE-2023-0297

pyloadCVE-2023-0297poc Eine Code-Injection-Schwachstelle in pyLoad-Versionen vor 0.5.0b3.dev31 führt durch Missbrauch der js2py-Funktionalität zu Pre-Auth-RCE. Verwendung Verwendung von CVE-2023-0297poc.exe: root@kitploit: -f string fileName:IP.txt -u string Beispiel:http://127.0.0.1:8080...