CVE-2024-27348

CVE-2024-27348 Ceci est un dépôt pour la vulnérabilité d'exécution de code à distance dans Apache HugeGraph CVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services:...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

violent-python3

Code source de « Violent Python » en Python 3 Code source du livre « Violent Python » de TJ O'Connor. Le code a été entièrement converti en Python 3, reformaté pour être conforme aux normes PEP8 et refactorisé afin d'éliminer les problèmes de dépendances liés à l'implémentation de bibliothèques...

CVE-2026-73701

CVE-2026-73701 is a critical unauthenticated remote code execution (RCE) vulnerability in the underlying operating system of HPE Networking Fabric Composer . The vulnerability requires certain preconditions outside the attacker's control to be met, which is reflected in the high attack complexity...

EUVD-2026-69579

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

CVE-2026-73701 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

EUVD-2026-69577

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

CVE-2026-19766

HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in the underlying operating system. An unauthenticated adjacent attacker can exploit this to execute arbitrary code as a privileged user , resulting in complete compromise of the AFC host . The NVD rates this as ...

internet-of-vulnerable-things

Internet des objets vulnérables Les résultats de mon petit mémoire de recherche sur le thème de l'Internet des objets vulnérables. Résumé Ce document fournit une démonstration pratique de l'insécurité de l'Internet des objets en piratant un appareil IoT typique. Plusieurs vulnérabilités ont été...

CVE-2026-6279

╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║ ╚══════════════════════════════════════════════════════════════╝ 📋 Résumé...

CVE-2026-0300

🚨 CVE-2026-0300 - Exécution de code à distance non authentifiée critique dans Palo Alto Networks PAN-OS Buffer Overflow dans User-ID™ Authentication Portal Captive Portal — Activement exploité dans la nature 📋 Aperçu Une vulnérabilité critique de buffer overflow CWE-787 dans le User-ID...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Этот репозиторий содержит Доказательство концепции PoC для уязвимости CVE-2025-62222. Он демонстрирует, как можно добиться удаленного выполнения кода RCE на машине разработчика, манипулируя контекстом GitHub Copilot Chat в VS Code с помощью скрытой...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access и Identity Manager: RCE через SSTI. CVE-2022-22954 - PoC SSTI Использование: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan...

CVE-2021-40870

CVE-2021-40870 Aviatrix permet à un utilisateur authentifié d'exécuter du code arbitraire...

CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348 : Apache HugeGraph RCE contournement avancé du sandbox Un exploit Proof of Concept PoC avancé et hautement fiable pour CVE-2024-27348 exécution de code à distance sur le serveur Apache HugeGraph. Contrairement à de nombreux PoC publics qui exécutent des commandes à l'aveugle ou...

CVE-2021-22893

CVE-2021-22893 Скрипт Proof-of-Concept PoC для эксплуатации уязвимости Pulse Secure CVE-2021-22893. Использование Позволяет получить RCE на Pulse Secure VPN. root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Client VMware vSphere - Téléchargement de fichier non autorisé menant à une exécution de code à distance RCE Le vSphere Web Client HTML5 est essentiellement une interface d'administration qui permet la gestion d'une installation vSphere. Le client vSphere offre à un...