CVE-2024-6387-Exploit-POC

CVE-2024-6387-Exploit-POC Este repositorio contiene un Proof of Concept POC para explotar la vulnerabilidad CVE-2024-6387 en servidores SSH que ejecutan versiones vulnerables de OpenSSH. ¿Qué es un POC? Un POC, o Proof of Concept, es un programa o script que demuestra la explotación de una...

CVE-2021-21014

PoC Limitada CVE-2021-21014 Las versiones de Magento 2.4.1 y anteriores, 2.4.0-p1 y anteriores y 2.3.6 y anteriores son vulnerables a un bypass de la restricción de carga de archivos. La explotación exitosa podría permitir a un atacante autenticado ejecutar código arbitrario. Versión afectada: =...

CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilidad de recorrido de directorio en archivos ".ONEPKG" que conduce a la ejecución arbitraria de código Microsoft Office OneNote 2007 CVE-2014-2815 Vulnerabilidad de recorrido de directorio en archivos ".ONEPKG" que conduce a ...

CVE-2020-14295

CVE-2020-14295 CVE-2020-14295 proof of concept. The original post can be found at exploit-db. Install requirements root@kitploit: python3 -m pip install -r requirements.txt Usage root@kitploit: $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL...

CVE-2026-100382 Unauthenticated remote code execution through wikitext in ExternalData

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Wikimedia Foundation Mediawiki - ExternalData Extension allows OS Command Injection. This issue affects Mediawiki - ExternalData Extension: from before 3.7...

CVE-2019-2729-Exploit

CVE-2019-2729-Exploit usage: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : Show help message and exit -u TARGET : Target URL -c COMMAND : Command to execute Example Usage python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami Credit for YSS Payload...

Security Bulletin: Security Vulnerabilities in Third-Party Node.js Packages Used by IBM Rhapsody Systems Engineering

Summary Security vulnerabilities were identified in the product's Node.js dependencies. The issue has been mitigated by removing the vulnerable packages and updating dependencies to secure versions. Vulnerability Details CVEID:CVE-2026-29087 DESCRIPTION: @hono/node-server allows running the Hono...

CVE-2021-44852

CVE-2021-44852 An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code...

CVE-2026-65083

A flaw was found in NVIDIA OpenShell. The sandbox provisioning Application Programming Interface API fails to properly enforce restrictions on disallowed inputs. An authenticated remote attacker could exploit this vulnerability by submitting crafted input to bypass sandbox boundaries. Successful...

CVE-2014-6271-IPFire

CVE-2014-6271 Implementación en Python de CVE-2014-6271: IP Fire =2.15 ShellShock RCE Basado en el módulo de Metasploit para el mismo exploit EDB ID: 34839 El exploit es automático. Consulte ./CVE-2014-6271.py --help para ver la gama completa de opciones Advertencia: El código en este repositorio...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Официальный модуль проверки безопасности для AI Security Tool Ecosystem 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Навигация по сайту: Главная • Обновления • Загрузки • Модули 🧠 Conceptual Overview Я публикую подробны...

infected-drones

Infected Drones Drone-to-Ground Control Station attack vectors, vulnerabilities & exploits Drone fleets today are one operator flying dozens or hundreds of drones from a single ground station. This makes the ground control station a valuable target for adversaries. It is where the pilot is usuall...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Ejecución Remota de Código Descripción El plugin SEO LAT Auto Post para WordPress es vulnerable a la sobrescritura de archivos debido a una falta de verificación de capacidad en la acción AJAX remoteupdate en todas las versiones hasta la 2.2.1 inclusive. Esto permite q...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...

CVE-2023-38831-Exploit

CVE-2023-38831 WinRAR Exploit Generator Created by: technicalcorp This project contains a Python script that exploits CVE-2023-38831 , a vulnerability in WinRAR versions prior to 6.23. The exploit generates a malicious RAR archive that triggers the execution of arbitrary code when the victim open...

-CVE-2026-7465

-CVE-2026-7465 CVE-2026-7465 Spectra Gutenberg Blocks Authenticated RCE Exploit...

CVE-2019-7609

CVE-2019-7609 Kibana Exploit for CVE-2019-7609 in python This exploit can give you RCE NOTE:- THIS IS THE MODIFIED VERSION Help Listening on port 4242 Running exploit Initial Access...

CVE-2025-32433-Exploit-edited

Exploit CVE-2025-32433 Compatible con Windows Ejecución Remota de Código No Autenticada en SSH de Erlang/OTP Descripción Este repositorio contiene un exploit para CVE-2025-32433, una vulnerabilidad crítica de ejecución remota de código no autenticada en el servidor SSH de Erlang/OTP...

CVE-2026-47670

CVE-2026-47670 Authenticated Remote Code Execution via loadReader functionName code injection in DbGate DbGate is an open-source, cross-platform database management tool designed for developers and database administrators who need to work with multiple database systems simultaneously. It provides...