542760 matches found
CVE-2026-41940
CVE-2026-41940 — Omisión de Autenticación en cPanel/WHM Autor: Dr.Anach | Contacto: @dranach | Licencia: MIT Resumen Inyección CRLF en el manejador de autenticación Basic de cpsrvd → acceso no autenticado a la API de WHM → Ejecución Remota de Código como root. Todos los cPanel desde v11.40...
CVE-2018-16763
CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - 💻 This script was developed by h3x0v3rl0rd...
CVE-2023-42222
CVE-2023-42222 Resumen de la vulnerabilidad WebCatalog anterior a la versión 48.4.0 llama a la función Electron shell.openExternal sin verificar que la URL corresponda a un recurso http o https, en algunas circunstancias. Esta vulnerabilidad permite a un atacante ejecutar código en la máquina de ...
cve-2019-6250-lab
CVE-2019-6250 — libzmq pre-auth RCE lab End-to-end working RCE chain + reproducible lab for CVE-2019-6250 , the pre-auth heap-buffer-overflow in libzmq's v2decodert::sizeready. A uint64t pointer-arithmetic overflow lets an unauthenticated peer overwrite the adjacent msgt::contentt::ffn function...
Exploits_CVE-2019-19781
Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...
CVE-2026-18490 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...
CVE-2026-18490
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution due to a Java native deserialization flaw. The issue resides in the PayDir Business Rules Manager RMI SSL endpoint, specifically within BrmRMISSLServerSocketFactory.java:95, EP8. An...
EUVD-2026-85352
IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint BrmRMISSLServerSocketFactory.java:95, EP8. An adjacent-network attacker can deliver a crafted...
CVE-2023-47460
CVE-2023-47460 Descripción Vulnerabilidad de inyección SQL en Knovos Discovery v.22.67.0 permite a un atacante remoto ejecutar código arbitrario a través del componente /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto Knovos...
CVE-2019-1221
PoC exploit para CVE-2019-1221 Se perdió el origen de este PoC Apunta a Internet Explorer 11 de 32 bits en Windows 10 x64 hasta RS5 Usa "VBScript.Encode" / CVE-2019-0768 para que el exploit funcione hasta RS5 Ejecuta calc usando WinExec...
CVE-2023-24100
CVE-2023-24100-Nuclei-Templates IoT RCE nuclei templates CVE-2023-24100 CNVD-2023-24100...
CVE-2026-49009
root@kitploit: ▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀...
Plex Media Server
RISK EVALUATION Plex Media Server before 1.43.3.10861 contains multiple vulnerabilities. In the worst case, a remote attacker could steal a legitimate user's account credentials and eventually write arbitrary files or execute code. 2. RECOMMENDED PRACTICES Fixed in Plex Media Server...
CVE-2018-14772
CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage root@kitploit: $ python exploit.py -h...
CVE-2020-24597
Made by HK CVE-2020-24597: Directory traversal in commedia to RCE Note: Because Joomla core 3.9.21 fixed improperly, therefore this bug has't patched improperly. I can bypass this patch eseaily. I want to keep this secret until this bug will have been fixed completely. Link...
CVE-2026-96672
Frappe ERPNext versions before 16.34.1 are vulnerable to an unauthorized method invocation due to insufficient validation of calculation_formula values within Financial Report Templates. The application fails to verify that these values reference whitelisted methods before passing them to frappe....
CVE-2017-8641_chakra_Js_GlobalObject
Descripción descrita más desde el sitio CVE !!Sí Los navegadores de Microsoft en Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten a un atacante ejecutar código arbitrario e...
CVE-2019-11932
CVE-2019-11932 Modifique la dirección de escucha la del atacante así como el puerto de escucha en el archivo exploit.c Código hexadecimal siguiente : 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile el código : gcc -o exploit egiflib.c exploit.c Ejecute el archivo compilado ./exploit...
CVE-2017-8570
Usage: After downloading the script, modify attackip to the IP of Kali, LPORT to the port that msf will listen on, and DIR to any empty directory Give the script 777 permissions root@kitploit: chmod 777 auto Then run the script root@kitploit: ./auto Then find the Invoice.ppsx file in the...