ingressNightmare-CVE-2025-1974-exps

Ingress Nightmare CVE-2025-1907 Descrizione Questa vulnerabilità consente a un attaccante remoto di eseguire codice arbitrario sulle installazioni interessate di kubernetes/ingress-nginx. Non è richiesta autenticazione per sfruttare questa vulnerabilità. Il difetto specifico risiede nella gestion...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files

A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilità di Directory Traversal nel file ".ONEPKG" porta all'esecuzione arbitraria di codice Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilità di Directory Traversal nel file ".ONEPKG" porta all'esecuzione arbitraria di...

CVE-2024-23997

YANA Notebook PoC Una prova di concetto per la vulnerabilità CVE-2024-23997. 1. Panoramica della vulnerabilità: Oggetto della vulnerabilità: Esecuzione locale di codice tramite XSS Versione della vulnerabilità: = 1.0.16 Tipo di attacco: Esecuzione remota di codice Vettori di attacco: Per sfruttar...

ThemeBleedPy

Un enorme ringraziamento a gabek per il PoC iniziale in C, e per aver effettivamente trovato questa CVE, questo è un remake del suo codice in python, riutilizzando i suoi file stage. Per vedere il PoC iniziale visita la sua pagina qui: https://github.com/gabe-k/themebleed ThemeBleedPy Una proof o...

CVE-2020-11651

CVE-2020-11651 Uno script che sfrutta SaltStack CVE-2020-11651 e CVE-2020-11652 per aggiungere nuovi utenti a un master Salt vulnerabile inserendo voci in /etc/passwd e /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...

cve-2022-42889-text4shell

Installa maven - maven-linux 1. Installazione Maven per creare il fat jar root@kitploit: mvn clean install 2. Build Docker root@kitploit: docker build --tag=text4shell . 3. Esecuzione Docker root@kitploit: docker run -p 80:8080 text4shell 4. Test dell'app root@kitploit:...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit Questo script è stato scritto per migliorare questo script PoC https://github.com/zerosum0x0/CVE-2019-0708 Il binario rdesktop impiegava troppo tempo per il timeout, quindi volevo un timeout più rapido Non era possibile eseguire scansioni di più IP;...

nmap-scripts

nmap-scripts script nmap per le vulnerabilità cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Esiste una vulnerabilità di esecuzione remota di codice nel modo in cui il protocollo Microsoft Server Message Block 3.1.1 SMBv3 gestisce determinate richieste, nota come...

CVE-2020-14882

CVE-2020-14882 Questo script consente l'esecuzione remota di codice RCE su Oracle WebLogic Server utilizzando una richiesta GET non autenticata. Sfrutta la vulnerabilità CVE-2020-14882. Eseguendo comandi arbitrari, un attaccante può ottenere accesso non autorizzato al server. Dettagli dell'exploi...

Low: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

CVE-2026-80235

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80233

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-16444

TeamViewer Desktop Clients prior to version 15.81.5 are affected by improper neutralization of path traversal sequences, allowing an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An ...

CVE-2026-16444 Improper Validation of File Paths in TeamViewer Desktop Clients

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...