EUVD-2026-69443

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73713

Local privilege-escalation vulnerabilities in HPE Networking Fabric Composer allow a local attacker with low privileges and no user interaction to achieve arbitrary code execution with root privileges on the underlying operating system. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ve...

CVE-2026-73713 Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to achieve arbitrary code execution with root privileges on the underlying operating system of the affected system...

EUVD-2026-69440

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to achieve arbitrary code execution with root privileges on the underlying operating system of the affected system...

CVE-2026-73712 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

CVE-2026-73712

HPE Networking Fabric Composer is affected by an unauthenticated remote code execution vulnerability in its API . If certain preconditions outside the attacker's control are met, a remote attacker can execute arbitrary commands on the underlying operating system, leading to complete system compro...

CVE-2026-73709

HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...

CVE-2026-73709 Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

CVE-2026-73705 Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary commands on the underlying operating syste...

CVE-2026-73705

CVE-2026-73705 affects the API of HPE Networking Fabric Composer , where an arbitrary file write flaw allows an authenticated low-privilege operator to escalate privileges. Successful exploitation can lead to arbitrary command execution on the underlying operating system and complete compromise o...

CVE-2024-6387-POC

OpenSSH CVE-2024-6387 भेद्यता का शोषण 🚀 एक Python स्क्रिप्ट जो OpenSSH CVE-2024-6387 में रिमोट कोड एक्ज़ीक्यूशन RCE भेद्यता का शोषण करने के लिए डिज़ाइन की गई है। यह भेद्यता एक सिग्नल हैंडलर में स्थिति से संबंधित है, जो मनमाना कोड निष्पादन का कारण बन सकती है, जिससे हमलावर को रूट एक्सेस प्राप्त हो...

discuz-ml-rce

discuz-ml-rce الأنظمة والإصدارات المتأثرة: Discuz!ML V3.2-3.4 وDiscuz!x V3.2-3.4 سبب الثغرة: لا يقوم نظام Discuz!ML بتصفية محتوى معامل language المُستلَم من الحقل l داخل ملف تعريف الارتباط cookie، مما يؤدي إلى تسلسل النصوص string concatenation وتنفيذ كود PHP. يظهر حقل xxxxxxxxlanguage ضمن حقول مل...

CVE-2024-31835

CVE-2024-31835 फ्लैटप्रेस CMS Flatpress v1.3 में क्रॉस साइट स्क्रिप्टिंग भेद्यता एक दूरस्थ हमलावर को फ़ाइल नाम पैरामीटर में क्राफ्टेड पेलोड के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। प्रभावित घटक: FlatPress CMS एडमिन पैनल फ़ाइल अपलोड फ़ील्ड निश्चित संस्करण: Flatpress v1.3 - FlatPre...

code-wsl-rce

VS Code Remote WSL में रिमोट कोड निष्पादन के लिए प्रूफ ऑफ कॉन्सेप्ट - CVE-2021-43907 ब्लॉग देखें: https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit. यह भी देखें: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43907. निर्माण 1. np...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType वेरिएबल फ़ॉन्ट जनरेटर एक्सप्लॉइट इस रिपॉजिटरी में Hack The Box पर स्थित VariaType मशीन के लिए एक विशेष एक्सप्लॉइट शामिल है। यह एक्सप्लॉइट fontTools लाइब्रेरी या वेब एप्लिकेशन द्वारा .designspace XML फ़ाइलों और मेटाडेटा इंटरपोलेशन को संभालने में मौजूद कमज़ोरी का ला...

Fastjson-1.2.47-rce

Fastjson-1.2.47-rce version1.2.51 تنفيذ الأوامر عن بُعد 1.2.24 "b":"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://localhost:1099/Exploit", "autoCommit":true ​ إصدار غير معروف بين 1.2.24-41...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. यह CVE-2009-1151 के लिए सार्वजनिक रूप से जारी पहला शोषण था। Syntax root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo root@kitploit: $...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell سكربت thinkphp5.0.1 التلقائي للحصول على shell يحل بعض المشكلات الصغيرة التي تُواجه عند التعامل مع thinkphp5.0.1، وذلك من خلال بناء أداة مخصصة توفر عناء إعادة التنفيذ اليدوي...

CVE-2024-21534

CVE-2024-21534: ثغرة تنفيذ التعليمات البرمجية عن بُعد في jsonpath-plus =10.0.7 الملخص يحتوي هذا المستودع على استغلال Proof of Concept - PoC لثغرة حرجة من نوع تنفيذ التعليمات البرمجية عن بُعد RCE في حزمة jsonpath-plus، وتؤثر على الإصدارات السابقة للإصدار 10.0.7. تعود المشكلة إلى عدم كفاية تنظيف...

CVE-2026-45221 Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...