11671 matches found
CVE-2021-4034
CVE-2021-4034 Версия CVE-2021-4034, работающая на CentOS 8 Основано на модификации https://github.com/berdav/CVE-2021-4034/tree/main/dry-run Способ использования Измените функцию system в pwnkit-dry-run.c для выполнения собственной команды по умолчанию добавляется пользователь r00t с паролем...
CVE-2026-96659
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
SummaryDecepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...
CVE-2026-1357
CVE-2026-1357 Лабораторная среда для CVE-2026-1357 1. Сборка окружения sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...
CVE-2024-12986
Сканер и эксплойт для CVE-2024-12986 Этот репозиторий содержит сканер и эксплойт для уязвимости CVE-2024-12986 , которая представляет собой уязвимость внедрения команд в конечной точке apmcfgupptim шлюзовых устройств DrayTek. Уязвимость позволяет атакующему выполнять произвольные команды на...
CVE-2026-96659
A flaw in Foreman allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. This vulnerability can expose sensitive data, including host root passwords . Additionally, if Safemode protections a...
EUVD-2026-90920
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...
Ashwesker-CVE-2025-60021
🛑 CVE-2025-60021 — Apache bRPC Remote Command Injection 📌 Overview CVE-2025-60021 is a critical remote command injection vulnerability found in the heap profiler built-in service /pprof/heap of Apache bRPC versions earlier than 1.15.0 , allowing unauthenticated attackers to run arbitrary OS...
foreman: Excessive Permissions for Viewer Role on Preview
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...
cve-2025-66478_rce_vulnerable
Modern Blog with shadcn/ui A modern and elegant blog built with Next.js 16, React 19, shadcn/ui and Tailwind CSS. IMPORTANT: Next JS VULNERABLE project created solely for educational, testing and exploitation purposes, NOT RECOMMENDED FOR PRODUCTION DEPLOYMENT, ONLY FOR LOCAL OR CONTROLLED...
Sudo-Vulnerability-Exploit-CVE-2019-14287
Sudo-Vulnerability-Exploit-CVE-2019-14287 Sudo has been discovered to be unreliable, one of the most significant, powerful, and commonly used utilities installed in almost any Unix and Linux based operating system as a simple command. A pseudo security policy bypass flaw that allows arbitrary...
CVE-2025-53547-POC
CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...
Rust_CVE-2025-55182
CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...
cve-2021-4034
CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...
CVE-2024-55963
CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...
USN-8857-1: KCoreAddons vulnerability
It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary commands in applications that relied o...
Blackash-CVE-2025-12762
🔐 CVE-2025-12762 — Critical RCE Vulnerability in pgAdmin 4 🚨 What’s the Issue? A Remote Code Execution RCE flaw exists in pgAdmin 4 versions ≤ 9.9. Attackers can run arbitrary commands on the host when pgAdmin is running in server mode and processes a PLAIN-format SQL dump during restore. ⚙️...