CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – 안전하지 않은 웹 서버의 Rust Use‑After‑Free 프로그램 코드 Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl SharedBuffe...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration. Release note:...

CVE-2015-3224-

CVE-2015-3224- просто дурацкая версия для CVE-2015-3224, для веб-консоли. необходимо настроить веб-сервер для pty.py...

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

EUVD-2026-72731

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server...

CVE-2026-77105

CommServe (Commvault) contains a cryptographic signature verification flaw in its privilege management functionality, enabling privilege escalation. The vulnerability is reachable over the network with low privileges and no user interaction , rated CVSS 4.0 8.7 (HIGH) with high impact on confiden...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

CVE-2026-62649

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2026-62649

A denial-of-service vulnerability affects the web server in Reyrolle 7SR5 (all versions

EUVD-2026-72664

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Hikvision IP Camera / DVR / NVR Improper Authentication — Privilege Escalation via Crafted Query Parameter | ---|--- CVE ID| CVE-2017-7921 Vulnerability Class| CWE-287: Improper Authentication CVSS v3.0 Base Score| 10.0 Critical — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 Scor...

CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2025-24813

Apache Tomcat RCE без аутентификации - CVE-2025-24813 Этот репозиторий предоставляет руководство и среду тестирования для оценки уязвимости CVE-2025-24813. Детали Затронутые версии: Apache Tomcat 11.0.0-M1 to 11.0.2 Apache Tomcat 10.1.0-M1 to 10.1.34 Apache Tomcat 9.0.0.M1 to 9.0.98 Ссылки...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 Authenticated RCE CVE-2021-31630 This is a modern Python 3.13+ compatible proof-of-concept exploit for CVE-2021-31630, a vulnerability in OpenPLC v3 that allows an authenticated user to upload a custom hardware layer containing malicious code, leading to remote code execution RCE on th...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

Windows-Exploitation-Web-Server-Tomcat-8.5.39-CVE-2019-0232

이 저장소에는 README가 없습니다...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow is a Java web server based on non-blocking IO. It consists of a few different parts: A core HTTP server that supports both blocking and non-blocking IO A Servlet 3.1 implementation A JSR-356 compliant web socket implementation Website: http://undertow.io Issues:...

CVE-2025-34100-demo

CVE-2025-34100-demo Демо-веб-сервер !NOTE Обратите внимание, что это всего лишь PHP-файлы для веб-сайта. Чтобы лучше понять CVE и создать более эффективный PoC, посетите https://nvd.nist.gov/vuln/detail/CVE-2025-34100 Эти файлы сами по себе не вызывают CVE, а являются точкой входа для эксплуатаци...

CVE-2014-6271

CVE-2014-6271 Usage go run CVE-2014-6271.go www.example.com 80 whoami...

CVE-2021-41773-PoC

CVE-2021-41773 Доказательство концепции Быстрое и грязное доказательство концепции для проверки, уязвимы ли хосты к CVE-2021-41773 root@kitploit: python3 full.py hosts.txt Где hosts.txt содержит ваши цели: root@kitploit: domain.com blah.com 192.168.1.1 Он выведет, уязвим ли хост или нет...