CVE-2021-4034

CVE-2021- A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling...

CVE-2026-19478-PoC

CVE-2026-19478 PoC Unauthenticated remote code-injection in GitLab's GraphQL layer that lets an attacker modify or delete public projects and user data with a single crafted query. No authentication, no user interaction, no special privileges...

valkey: Valkey: Remote code execution via use-after-free in stream deserialization

A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

Important: Red Hat Security Advisory: valkey security, bug fix, and enhancement update

An update for valkey is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2025-55182-poc

CVE-2025-55182 - Vulnerabilidad de cadena de prototipos de React Server Components Este POC demuestra CVE-2025-55182 utilizando el código vulnerable real de [email protected]. Inicio rápido root@kitploit: Instalar dependencias npm install Iniciar servidor vulnerable puerto 3002 npm start...

Pingpon-Exploit

PINGPON EXPLOIT Autor: @037 Pingpon es una herramienta utilizada para obtener miles de routers domésticos GPON vulnerables usando Shodan.io para luego ejecutar cualquier comando de Linux aprovechando una falla de ejecución remota de código CVE-2018-10562. DESCARGO DE RESPONSABILIDAD NO soy...

CVE-2022-24638

VISTO EN EXPLOITDB: https://www.exploit-db.com/exploits/51026 ESTA VERSIÓN ESTÁ CORREGIDA PARA EVITAR FALSOS NEGATIVOS CVE-2022-24637 Exploit para el RCE no autenticado en Open Web Analytics OWA 1.7.4. Este trabajo se basa en https://devel0pment.de/?p=2494. DESCARGO DE RESPONSABILIDAD: Este scrip...

CVE-2026-40048

camel-pqc FileBasedKeyLifecycleManager Unsafe Deserialization Reproducer CVE-2026-40048 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-pqc component, tracked as CVE-2026-40048. FileBasedKeyLifecycleManager reads .key files from the configured key directory...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...

CVE-2023-35813-PoC

Sitecore Vulnerabilidad de Ejecución Remota de Código CVE: 2023-35813 descubierta por @mwulftange CVSS Score: 9.8 Severity: Crítica Esta es la fantástica publicación del blog de los investigadores que la encontraron: https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ Determina...

proofpoint-CVE-2023-0090

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución Remota de Código - RCE sin autenticación CVE: CVE-2023-0090 Cronología: Descubierto - ly1g3 Reportado - ly1g3 Corregido...

CVE-2024-55187

Summary Sensitive administrative parameters are not sufficiently sanitized, allowing an attacker to poison paths to system binaries. The attacker can then upload dangerous CSV files that can then be treated as PHAR archives holding shell metacharacters that will be evaluated by PHP's exec call,...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT PARA USAR EN METASPLOIT, PERMITE A LOS ATACANTES OBTENER UNA EJECUCIÓN REMOTA DE CÓDIGO A TRAVÉS DE MICROSOFT OFFICE WORD AL INYECTAR CÓDIGO MALICIOSO EN EL ARCHIVO...

CVE-2022-22947

Descripción de la vulnerabilidad Spring Cloud Gateway es un nuevo proyecto de Spring Cloud cuyo objetivo es reemplazar a Netflix Zuul. Está desarrollado sobre Spring 5.0+, Spring Boot 2.0+ y WebFlux basado en el framework de comunicación reactivo de alto rendimiento Netty, modelo asíncrono no...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC No autenticado Resumen Las versiones 15, 16 y 17 de FreePBX contienen una vulnerabilidad de Ejecución Remota de Código RCE causada por una sanitización insuficiente de los datos proporcionados por el usuario en los endpoints. Un atacante no autenticado puede manipular la base de...

CVE-2024-27956-WORDPRESS-RCE-PLUGIN

CVE-2024-27956-WORDPRESS-RCE-PLUGIN CVE-2024-27956 WORDPRESS RCE PLUGIN Attacked plugin wp-automatic...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Insecure Deserialization in Blockchain Oracle Overview A blockchain oracle node deserializes data from a smart contract event using Python’s pickle, allowing an attacker to execute arbitrary commands. Severity: Critical Full Node Compromise Oracle Simulation & Exploit...

CVE-2026-63030-POC

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read the full technical analysis first: CVE-2026-63030: WordPress Pre-Auth RCE Explained This repository contains the proof-of-concept exploit referenced in that article. Start with the blog to understand the vulnerability, limitations, and...