CVE-2026-34197

CVE-2026-34197 通过 Jolokia API 实现 Apache ActiveMQ 远程代码执行...

CVE-2024-53677

CVE-2024-53677 CVE-2024-53677 の概念実証エクスプロイト - Apache Struts ファイルアップロードパストラバーサルの脆弱性によるリモートコード実行...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 作者 Mohammed Idrees Banyamer 安全研究员 📌 概述 本仓库包含针对 CVE-2026-25939 的概念验证（PoC）漏洞利用代码，这是 FUXA （开源 SCADA/ICS 软件）中的一个严重授权绕过漏洞。该漏洞允许未经身份验证的远程攻击者创建、修改和删除任意调度器条目，可能导致远程代码执行和工业控制系统被操纵。 🔥 漏洞详情 CVE ID ：CVE-2026-25939 CVSS 评分 ：9.1（严重）- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 受影响版本 ：FUXA = 1.2.8, 1.2.11...

ComfyUIrce

ComfyUIrce Git CVE-2025-67303 ペイロード...

CVE-2026-34197-payload-Apache-ActiveMQ-

ActiveMQ Jolokia RCE 漏洞复现指南 本仓库提供了一个基于 Apache ActiveMQ 暴露的 Jolokia API 接口（/api/jolokia/）的远程代码执行 RCE 漏洞复现环境和利用脚本。 通过调用 addNetworkConnector 操作，强制 ActiveMQ 解析恶意构造的远程 Spring XML 配置文件，从而利用 MethodInvokingFactoryBean 执行系统命令。 📁 包含文件 payload.py : 利用主脚本，发送带有动态 Broker 名称的 HTTP POST 请求。 payload.xml : 恶意的...

CVE-2026-41940

CVE-2026-41940 — Omisión de Autenticación en cPanel/WHM Autor: Dr.Anach | Contacto: @dranach | Licencia: MIT Resumen Inyección CRLF en el manejador de autenticación Basic de cpsrvd → acceso no autenticado a la API de WHM → Ejecución Remota de Código como root. Todos los cPanel desde v11.40...

cve-2026-33067

CVE-2026-33017 — Langflow 未認証RCE Nucleiテンプレート Nucleiテンプレートは、CVE-2026-33017 — Langflow ≤ 1.8.2 における、公開フロービルドエンドポイントから到達可能な未認証のリモートコード実行脆弱性を検出します。 root@kitploit: POST /api/v1/buildpublictmp/flowid/flow 脆弱なハンドラは、攻撃者が制御する data フローグラフを受け入れ、グラフビルド中に data.nodes.data.node.template.code.value...

react-rsc-cve-2025-55182-lab

CVE-2025-55182 实验环境 — React 服务器组件远程代码执行 用于教育用途的实验环境，演示 CVE-2025-55182 — React 服务器组件中因 Flight 协议反序列化器的原型污染导致的关键（CVSS 10.0）远程代码执行漏洞。 免责声明： 本仓库仅用于教育和授权的安全研究目的 。未经授权访问计算机系统是非法的。作者对滥用本材料不承担任何责任。仅对您拥有或已获得明确书面许可的系统进行测试。使用本代码即表示您同意对自己的行为负责。 快速开始 root@kitploit: 1. 克隆 git clone...

cve-2019-6250-lab

CVE-2019-6250 — libzmq 预认证 RCE 实验环境 针对 CVE-2019-6250 的端到端可用 RCE 利用链 + 可复现实验环境。该漏洞是 libzmq v2decodert::sizeready 中的预认证堆缓冲区溢出。通过 uint64t 指针算术溢出，未认证对等端可在 ZMTP/2.0 线上路径覆盖相邻的 msgt::contentt::ffn 函数指针，然后经由 TCP socket 关闭触发：v2decodert → inprogress.close → 。...

hacktivity-vulns-exploits-lab

Vulnerabilidades, Exploits y Payloads de Acceso Remoto — informe de laboratorio Mi recorrido y análisis de la hoja de Hacktivity Cyber Security Labs "Vulnerabilities, Exploits, and Remote Access Payloads" curso de Ethical Hacking y Penetration Testing, Leeds Beckett University. Cubre cómo las...

CVE-2026-84675

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...

EUVD-2026-70142

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-84671

CVE-2026-84671 affects the Jenkins File Parameter Plugin in versions 425.v3fa_801681b_5e and earlier . The vulnerability stems from Stapler data binding , which allows an attacker with low privileges to write files to arbitrary locations on the Jenkins controller file system , potentially leading...

CVE-2026-78689 NGINX ngx_http_js_module vulnerablility

Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML namespace prefix list t...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

EUVD-2026-70143

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

EUVD-2026-70140

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

CVE-2026-84670

Jenkins Performance Plugin versions 1015.v09ca_52b_3370e and earlier fail to restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller. An attacker with Item/Configure permission can leverage this to execute...