CVE-2022-42092

CVE-2022-42092 파이썬 익스플로잇 🔥 설명 이 파이썬 익스플로잇 스크립트는 Backdrop CMS의 제한 없는 파일 업로드를 대상으로 원격 코드 실행RCE을 달성합니다. ⚠️ 영향을 받는 버전 버전 1.22.0 및 이전 버전 참고: Backdrop CMS는 이에 대해 이의를 제기하며 고급 권한이 필요하다고 주장하므로, 1.22.0 이상의 버전에도 여전히 존재할 수 있습니다. 제 추측으로는 먼저 관리자 액세스 권한이 있어야 한다는 의미일 것입니다. 그래도 이는 유효한 취약점이며, 전체 시스템 제어를 획득하기 위해 확실히...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC 인증된 PoC 데모 사용법 인증되지 않은 PoC 데모 사용법 인증된 PoC CVE-2018-1002105에 대한 Proof-of-Concept 익스플로잇입니다. 현재 익스플로잇은 pods와 pods/exec에 대한 create 및 get 권한이 필요합니다. portforward 및 attach에 대한 지원이 추가되었으며, 이와 유사한 권한이 필요합니다. 현재 PoC는 기본 etcd-kubernetes 파드에서 시크릿을 덤프합니다. 데모 작동 중인 PoC: 사용법 usage: poc.py -...

CVE-2024-21683-RCE

사용법 python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...

offsec-karaf-exploits

offsec-karaf-exploits 사용법: python exploit.py --help 예제: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf 페이로드 재빌드 Felix Framework 설정 1. lib 디렉터리를 생성합니다. mkdir -p ./revshell/lib 2. Felix Framework 7.0.5를 다운로드합니다. 3. zip 아카이브를 압축 해제합니다. 4...

CVE-2025-12030

CVE-2025-12030: Небезопасная прямая ссылка на объект в плагине ACF to REST API для WordPress Ключевые слова: CVE-2025-12030, уязвимость ACF to REST API, IDOR, безопасность WordPress, эксплойт с аутентификацией, уязвимость плагина WordPress, CWE-639, изменение полей ACF, обход авторизации, WordPre...

CVE-2024-40617

CVE-2024-40617 CVE-2024-40617용 익스플로잇 PoC 설명 자세한 설명은 Medium 게시물을 참조하세요 Fujitsu M2M GW1500 : From M2M to M2M2P0wn 사용법 | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | | | || |||| || |||| / // || || usage: CVE-2024-40617-PoC.py -h --version -t...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 인증된 RCE PoC 이 저장소는 Cacti의 인증된 원격 코드 실행 취약점인 CVE‑2025‑24367 에 대한 개념 증명 익스플로잇을 포함합니다. 이 문제는 그래프 템플릿 처리에서 불충분한 입력 검증을 악용합니다. "Unix – Logged in Users" 그래프 템플릿ID 226에 악성 콘텐츠를 주입하여 Cacti 웹 루트에 임의의 PHP 파일을 작성하고 서버에서 명령을 실행할 수 있습니다. 이 PoC는 실험실 환경, 통제된 테스트, 그리고 연구 목적으로만 사용됩니다. 취약점 요약...

CVE-2026-73714 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to access data beyond what is authorized by the user's existing privilege level, potentially leading to further...

CVE-2026-58567

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

CVE-2026-58572

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

Exploit for CVE-2026-19295

Description Proof o...

GHSA-F2P5-J6FG-5CXF Wagtail: Denial of service via unbounded filter specs in the image preview

Impact An authenticated admin user can trigger expensive rendition processing with purposefully crafted filter specs resulting in potentially service degradation. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. Patches Patched versions have be...

EUVD-2026-63271

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...

CVE-2026-77083 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...

CVE-2026-77083 n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution

n8n is a workflow automation platform. In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not freeze the sandbox's Function.prototype, allowing an authenticated user with the ability to create and execute workflows to pollute it from within a Code node...

CVE-2026-77075

n8n's editor splices resource-locator field values into node URL templates without expression-syntax checks, enabling an authenticated user to inject JavaScript evaluated in another user's session. CVSS 8.4 HIGH. Affected: <1.123.69, 2.x <2.33.4, 2.34.x

CVE-2026-75963

The Events Made Easy WordPress plugin (all versions up to and including 3.2.5 ) is vulnerable to Local File Inclusion via the eme_single_event_page_template function, specifically through the wp_page_template event property. Authenticated attackers with contributor-level access or above can injec...

EUVD-2026-62893

In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a dashboard. When another authenticated user exports the dashboard as a Portable Document Format PDF file, Splunk...

PT-2026-78940

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.34.1 n8n versions 2.33.x prior to 2.33.4 Description The SearXNG Agent tool contains a Server-Side Request Forgery SSRF protection bypass. This occurs because the tool utilizes a raw HTTP client to send requests to a...

PT-2026-78938

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description An authenticated user with permissions to create and execute workflows can achieve a sandbox escape within the JavaScript Code node. This occu...