389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

Critical: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.5 E4S for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RCE-CVE-2020-5902

RCE-CVE-2020-5902 BIG-IP F5 Ejecución Remota de Código Descripción Estos ataques están dirigidos a BIG-IP, un dispositivo de red multipropósito fabricado por F5 Networks. Los dispositivos BIG-IP pueden configurarse para funcionar como sistemas de modelado de tráfico, balanceadores de carga,...

CVE-2023-51467

CVE-2023-51467 exp.py changed to command execution Post.txt Serialization vulnerability exploitation bypassauth.txt Authentication bypass test Vulnerability cause Due to the incorrect use of empty values during authentication checks, this method did not take effect, leading to authentication...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Recorrido Completo de Pruebas de Penetración Objetivo: HackSudo Thor de VulnHub Objetivo: Obtener acceso root y leer /root/proof.txt Entorno: Laboratorio aislado de VirtualBox segmentado por un firewall pfSense Tabla de Contenidos Resumen Topología de Red Resumen de la Cadena de...

cve-2022-33891

CVE-2022-33891 Vulnerabilidad de inyección de comandos de Apache Spark Shell Un POC en Python para explotar la vulnerabilidad de inyección de comandos de Apache Spark Shell. Vi algunos otros POCs por ahí, pero parecían muy sospechosos. Este es limpio y sencillo. No descubrí este...

CVE-2023-31711

CVE-2023-31711 Control de acceso incorrecto en ZKTECO permite a atacantes remotos leer cualquier archivo a través de la API administrativa. Instalación de los módulos requeridos Dentro del directorio ZKTEco: $ pip install -r ./pyzatt/requirementsdev.txt Ejecución del exploit Dentro del directorio...

CVE-2022-30525

CVE-2022-30525 Vulnerabilidad de inyección remota de comandos en el firewall de Zyxel CVE-2022-30525 Argumentos opcionales: -h, --help show this help message and exit -u url, --url url URL objetivo, p. ej.:"http://127.0.0.1" -f file, --file file Objetivos en archivo, p. ej.:"ip.txt" Uso python3...

DSL-2750U-Full-chain

firmware-analysis 1. DSL-2750U Bugs : misconfiguration of tftp server CVE-2021-3707 command injection bug CVE-2021-3708...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

CVE-2025-55182-React2Shell-Lab

CyberSec Blog CTF - React2Shell PoC This repository provides a vulnerable CTF Capture The Flag environment based on a cybersecurity blog using Next.js and React Server Components. CVE-2025-55182 : Pre-authentication Remote Code Execution RCE vulnerability in React Server Components versions 19.0....

CVE-2024-24919

CVE-2024-24919 Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs This tool creates an output folder containing a "Target-IP.txt" file. This file includes the contents of the /etc/passwd file from the affected target, thereby determining if the system is vulnerable ...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md CVE-2025-60787 Detection: motionEye RCE via Config Injection Unauthenticated Remote Code Execution in motionEye Still Images - Image File Name Example PoC payload: $touch /tmp/test.%Y-%m-%d-%H-%M-%S When motion restarts, the shell command executes and creates /tmp/test. Detection Covera...

CVE-2022-0944

CVE-2022-0944 SQLPad - Inyección de plantillas Esta es una vulnerabilidad ciega, lo que significa que la salida se devuelve directamente en la respuesta. Exploit Usa el script con el siguiente comando: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin...

thm-blue-writeup

TryHackMe — Blue | Phase 1: Reconnaissance with Nmap Course: Cyber Security 101 | Room: Blue | Tool: Nmap Context The Blue room's main objective is the use of Metasploit. However, the first exercise focuses on reconnaissance — identifying open ports and vulnerabilities on the target before any...

Blackash-CVE-2017-0144

🌐 CVE-2017-0144 — EternalBlue: Microsoft Windows SMBv1 Remote Code Execution Vulnerability "One exploit. Dozens of malware families. Billions in damage." 🔍 One-line summary CVE-2017-0144 is a critical remote code-execution vulnerability in the SMBv1 server implementation in Microsoft Windows. The...

PwnKit-CVE-2021-4034

Pwnkit Exploit Instructions I did not write this. This is only to document my exection/instruction of exploit use as there are some very intricate and complicated steps to follow. Files come from the following source:...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration...

ingressNightmare-CVE-2025-1974-exps

Pesadilla de Ingress CVE-2025-1907 Descripción Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de kubernetes/ingress-nginx. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe en el manejo de solicitudes...

CVE-2025-9974

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...