F5 Networks BIG-IP : BIG-IP APM vulnerability (K000162605)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5.0.41.14 / 17.5.1.9.0.160.12 / 21.1.0.2.0.30.22. It is, therefore, affected by a vulnerability as referenced in the K000162605 advisory. When a BIG-IP APM access policy and an OAuth profile are configured on a...

RockyLinux 10 : unbound (RLSA-2026:71419)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71419 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...

RHEL 8 : unbound (RHSA-2026:72183)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72183 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Heap buffer overflow and...

Linux Distros Unpatched Vulnerability : CVE-2026-93834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent...

CVE-2026-78902

A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.

CVE-2026-78902

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

CVE-2024-44849

CVE-2024-44849 Autor: Extencil [email protected] CVE-2024-44849 es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a todas las versiones anteriores hasta Qualitor 8.24. Sitio web de Qualitor Usar este programa para atacar o comprometer cualquier empresa o sistema sin...

CVE-2025-32433

Investigación de seguridad sobre Erlang/OTP SSH CVE-2025-32433 Prueba de concepto de exploit en Python CVE-2025-32433 Ejecución Remota de Código no autenticada en Erlang/OTP SSH. También tengo una plantilla Nuclei para detección de banner y una verificación Nuclei RCE. Los registros IDS de Surica...

CVE-2025-7766

CVE-2025-7766 PoC Exploit PoC for exploiting XML External Entity vulnerability in CVE-2025-7766. Demonstrates file read /etc/passwd and out-of-band HTTP callbacks. Author : Byte Reaper CVE : CVE-2025-7766 Vulnerability : Remote Code Execution via XML External Entity XXE PoC for exploiting XXE in...

CVE-2024-4577

CVE-2024-4577 Exploit de Ejecución Remota de Código en PHP CGI Autor: Byte Reaper CVE: CVE-2024-4577 Categoría: Explotación Web PHP CGI 8.1, 8.2, 8.3 Windows MIT...

CVE-2025-7769

CVE-2025-7769 – Inyección Remota de Comandos en mobileapi Descripción : Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE‑2025‑7769 , una vulnerabilidad crítica de Inyección de Comandos remota encontrada en dispositivos Tigo Energy CCA que exponen el endpoint...

CVE-2021-28480_HoneyPoC3

ExchangeRCE-CVE-2021-28480 ESTO NO ES UN EXPLOIT REAL, ES UN HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC para explotar RCE en CVEs de Exchange: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 y CVE-2021-28483. Uso Logra RCE en servidores Exchange Para ejecutar, desde un host Linux:...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 ESTO NO ES UN EXPLOIT REAL, ES UN HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Script de Prueba de Concepto PoC para explotar Pulse Secure CVE-2021-22893. NO EJECUTES ESTO. Uso Logra RCE en Pulse Secure VPNs root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1...

React2P4IM0Nshell

React2P4IM0Nshell 💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos CVE-2025-55182/83/84 para entornos Next.js y React Server Components RSC directamente desde tu navegador, con terminal linux incorporada en la propia extension para resibir cualquier reverse shell ❌ ⚡...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...

CVE-2025-8971

CVE-2025-8971 Inyección SQL Autor: Byte Reaper Descripción : Este exploit para CVE-2025-8971, una vulnerabilidad de inyección SQL en itsourcecode Online Tour and Travel Management System 1.0. La vulnerabilidad existe en /admin/operations/travellers.php y puede ser explotada remotamente a través d...

L4J-Vuln-Patch

NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...

CVE-2018-7600

CVE-2018-7600 CVE-2018-7600 - Drupal 7.x RCE Drupal 7.58 unauthenticated RCE Requirements python3 python requests pip install requests Usage Install dependencies modify the HOST variable in the script run the code win Just install requests pip install requests, edit the file to change the host an...

CVE-2023-26035

POC para CVE-2023-26035 Funciona para ZoneMinder versiones anteriores a 1.36.33 y 1.37.33 Vulnerabilidad: Ejecución remota de código RCE Uso root@kitploit: └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl...