1134349 matches found
CVE-2024-27348
CVE-2024-27348 Ceci est un dépôt pour la vulnérabilité d'exécution de code à distance dans Apache HugeGraph CVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services:...
Important: Red Hat Security Advisory: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...
violent-python3
Code source de « Violent Python » en Python 3 Code source du livre « Violent Python » de TJ O'Connor. Le code a été entièrement converti en Python 3, reformaté pour être conforme aux normes PEP8 et refactorisé afin d'éliminer les problèmes de dépendances liés à l'implémentation de bibliothèques...
CVE-2026-73701
CVE-2026-73701 is a critical unauthenticated remote code execution (RCE) vulnerability in the underlying operating system of HPE Networking Fabric Composer . The vulnerability requires certain preconditions outside the attacker's control to be met, which is reflected in the high attack complexity...
EUVD-2026-69579
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...
CVE-2026-73701 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...
EUVD-2026-69577
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...
CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...
CVE-2026-19766
HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in the underlying operating system. An unauthenticated adjacent attacker can exploit this to execute arbitrary code as a privileged user , resulting in complete compromise of the AFC host . The NVD rates this as ...
internet-of-vulnerable-things
Internet des objets vulnérables Les résultats de mon petit mémoire de recherche sur le thème de l'Internet des objets vulnérables. Résumé Ce document fournit une démonstration pratique de l'insécurité de l'Internet des objets en piratant un appareil IoT typique. Plusieurs vulnérabilités ont été...
CVE-2026-6279
╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║ ╚══════════════════════════════════════════════════════════════╝ 📋 Résumé...
CVE-2026-0300
🚨 CVE-2026-0300 - Exécution de code à distance non authentifiée critique dans Palo Alto Networks PAN-OS Buffer Overflow dans User-ID™ Authentication Portal Captive Portal — Activement exploité dans la nature 📋 Aperçu Une vulnérabilité critique de buffer overflow CWE-787 dans le User-ID...
PoC-CVE-2025-62222
PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Этот репозиторий содержит Доказательство концепции PoC для уязвимости CVE-2025-62222. Он демонстрирует, как можно добиться удаленного выполнения кода RCE на машине разработчика, манипулируя контекстом GitHub Copilot Chat в VS Code с помощью скрытой...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access и Identity Manager: RCE через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan...
CVE-2021-40870
CVE-2021-40870 Aviatrix permet à un utilisateur authentifié d'exécuter du code arbitraire...
CVE-2024-27348-HugeGraph-RCE
CVE-2024-27348 : Apache HugeGraph RCE contournement avancé du sandbox Un exploit Proof of Concept PoC avancé et hautement fiable pour CVE-2024-27348 exécution de code à distance sur le serveur Apache HugeGraph. Contrairement à de nombreux PoC publics qui exécutent des commandes à l'aveugle ou...
CVE-2021-22893
CVE-2021-22893 Скрипт Proof-of-Concept PoC для эксплуатации уязвимости Pulse Secure CVE-2021-22893. Использование Позволяет получить RCE на Pulse Secure VPN. root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...
CVE-2021-21972
CVE-2021-21972 CVE-2021-21972 Client VMware vSphere - Téléchargement de fichier non autorisé menant à une exécution de code à distance RCE Le vSphere Web Client HTML5 est essentiellement une interface d'administration qui permet la gestion d'une installation vSphere. Le client vSphere offre à un...