CVE-2022-44311

Lettura fuori dai limiti in html2xhtml : CVE-2022-44311 Sommario Html2xhtml v1.3 è stato scoperto contenere una lettura fuori dai limiti nella funzione static void elmclosetreenodet nodo in procesador.c. Questa vulnerabilità consente agli attaccanti di accedere a file sensibili o causare una Deni...

log4j-rce-test

Erstellen ./build.sh Starte log4j RCE Server ./start-log4j-rce-server.sh Test Führen Sie java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j aus Überprüfen Sie, ob Sie Logs in hack.log aus dem aktuellen Ordner erhalten. Sie können diese Zeile ändern String cmds = "sh", "-c", "echo 'Exploit at '" +...

CVE-2026-62958

Una vulnerabilità in Libriscv permette all'attaccante di far crashare la sandbox utilizzando una lettura fuori dai limiti. Per creare Bad elf: root@kitploit: python3 poc.py samplefile poisonedfile Risultati: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at...

CVE-2020-0601

CVE-2020-0601 PoC per CVE-2020-0601- Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall Su kali: 1.Crea un file PKCS12 root@kitploit: openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -ne...

WAGO-CVE-2023-1698

WAGO-CVE-2023-1698 WAGO-System-Ferncodeausführungs-Schwachstelle CVE-2023-1698 Hinweis Ich habe ein Tool für lokale Tests und POC-Entwicklung entwickelt, das nur als technische Lernreferenz dient. Bitte verwenden Sie es nicht für illegale Zwecke. Direkte oder indirekte Konsequenzen und Verluste,...

MAL-2026-15566 Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

cve-2016-1555

Descrizione Il modulo sfrutta una vulnerabilità di esecuzione arbitraria di comandi non autenticata in Netgear WN604 precedente alla 3.3.3 e in WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360 e WNDAP660 precedente alla 3.5.5.0. La vulnerabilità si verifica nel modo in cui il router gestisce le...

CVE-2022-46169

Cacti | Bypass dell'autenticazione | RCE | CVE-2022-46169 Cacti: Exploit di esecuzione remota di codice non autenticato in Ruby Cacti Docker Questa è un'applicazione dockerizzata vulnerabile alla vulnerabilità RCE di Cacti CVE-2022-46169. Segui il link per avviare Cacti root@kitploit:...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – FreePBX Unauthentifizierte SQL-Injection zu RCE PoC Dieses Repository enthält zwei Python-Proof-of-Concept-Skripte PoC, die sich gegen CVE-2025-57819 richten, eine kritische unauthentifizierte SQL-Injection-Schwachstelle in FreePBX. 🧠 Über die Schwachstelle CVE-2025-57819...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Assegnazione di privilegi errata / Escalation dei privilegi Sintesi esecutiva Questa repository contiene un laboratorio Docker locale per riprodurre e validare CVE-2026-49060, una vulnerabilità di assegnazione dei privilegi errata che interessa i...

Microsoft SharePoint Server - Remote Code Execution (ToolShell)

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...

Next.js Middleware Bypass

Next.js contains a critical middleware bypass vulnerability affecting versions 11.1.4 through 15.2.2. The vulnerability allows attackers to bypass middleware security controls by sending a specially crafted 'x-middleware-subrequest' header, which can lead to authorization bypass and other securit...

Grafana 3.0.1-7.0.1 - Server-Side Request Forgery

Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...

VMware vCenter Server - Out-of-Bounds Write

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...

WordPress File Manager Plugin - Remote Code Execution

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. id: CVE-2020-25213 Uploaded file will be accessible at:-...

NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Read

NAKIVO Backup & Replication is a data protection solution used for backing up and restoring virtualized and physical environments. A vulnerability has been identified in certain versions of NAKIVO Backup & Replication that allows an unauthenticated attacker to read arbitrary files on the underlyi...

Apache Struts2 S2-008 RCE

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method. id: CVE-2012-0392 info: name: Apache...

CVE-2022-46395

Exploit per CVE-2022-46395 Il write-up si trova qui. Si tratta di un bug nel driver del kernel Arm Mali che ho segnalato a novembre 2022. Il bug può essere utilizzato per ottenere l'esecuzione arbitraria di codice nel kernel dal dominio di app non fidato, che viene poi utilizzato per disabilitare...

CVE-2023-2598

CVE-2023-2598 Was ist iouring? ​ iouring ist eine Systemaufrufschnittstelle für Linux. Sie unterstützt inzwischen fast alle Systemaufrufe, nicht nur read und write wie anfänglich. Sie ermöglicht einer Anwendung, Systemaufrufe anzustoßen, die asynchron ausgeführt werden können. Submission- und...