627085 matches found
wp2shell-poc2
wp2shell-poc Prueba de concepto para una inyecciรณn SQL no autenticada en el nรบcleo de WordPress que encadena a ejecuciรณn remota de cรณdigo, mediante confusiรณn de ruta en el endpoint REST batch CVE-2026-63030. El exploit no requiere credenciales ni configuraciรณn mรกs allรก de un objetivo accesible...
CVE-2026-49952
configuraciรณn pip3 install Pillow torch torchvision ejecuciรณn $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Exploit RCE para Discuz! X5.0 por EgiX | +----------------------------------------------------+ + Obteniendo cรณdigo de autenticaciรณ...
CVE-2022-36804
CVE-2022-36804 Los componentes de Bitbucket Server y Bitbucket Data Center tienen una vulnerabilidad de inyecciรณn de comandos, segรบn informaciรณn descubierta recientemente por el equipo de seguridad de Sangfor. Un atacante puede enviar solicitudes HTTP maliciosas para ejecutar cรณdigo arbitrario y...
EUVD-2026-91762
Nx daemon and plugin worker sockets are accessible to other local users...
Nx daemon and plugin worker sockets are accessible to other local users
Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...
GHSA-W3VV-58GJ-GW77 Nx daemon and plugin worker sockets are accessible to other local users
Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...
Nx: Path traversal in nx migrate package-migrations extraction
Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...
GHSA-HRVQ-X7JP-36XV Nx: Path traversal in nx migrate package-migrations extraction
Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...
EUVD-2026-87858
vm2: NodeVM custom resolution bypasses external path boundaries...
running-CVE-2024-32002-locally-for-tesing
Estamos adaptando esto para uso local seguimos esta publicaciรณn de blog pero con algunas diferencias clave https://amalmurali.me/posts/git-rce Cรณmo funciona 1. Un repositorio malicioso gitrce incluye un submรณdulo con una ruta especialmente diseรฑada. 2. La ruta del submรณdulo usa una variaciรณn de...
CVE-2025-55182-RCE-shell
CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interactiva secuestro HTTP + POST + AES-256-CBC/BASE64 Detecciรณn -dnslog Detecciรณn sin salida de DNSLog Nuclei -poc Detecciรณn de eco de vulnerabilidad Explotaciรณn -exp Shell interactiva eco base64 -exp2 Shell interactiva secuestro HTTP + POST +...
CVE-2024-32002
GIT RCE CVE-2024-32002 Descrizione | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | Per prima cosa devi creare i repository "calledrepo" e "commandrepo" su git. | La vittima eseguirร successivamente la clonazione di calledrepo con "git clone --recursi...
ActiveMQ-cve-2026-42588-scanner-gui
ActiveMQ-cve-2026-42588-scanner-gui ใOne-click VPS Exploitation Recommended for users with a VPSใ 1. Enter the VPS public IP and listening port e.g., 9999 2. Enter the command to execute e.g., touch /tmp/cvepwned 3. Click Generate VPS Command โ Click Copy Command 4. SSH into the VPS, paste the...
CVE-2025-4336
eMagicOne Store Manager para WooCommerce 1: lo: mtu 65536 qdisc noqueue st...
Follina
Follina Notes related to CVE-2022-30190 FOLLINA: CVE-2022-30190 1. Uses Microsoft Support Diagnostic Tool MSDT 2. Exploits diagnostic window opened for Diagnosis and when executed properly, gives reverse shell to attacker. 3. Github: a. https://github.com/JohnHammond/msdt-follina b...
cachet_2.4.0-dev
CVE-2021-39174 Cachet 2.4.0-dev Un script de python3 para CVE-2021-39174 Cachet 2.4.0-dev: divulgaciรณn de informaciรณn y RCE mediante inyecciรณn de plantillas Twig en el lado del servidor. Para el RCE se necesita la API KEY del usuario. Consulta el enlace de Leave Songs a continuaciรณn, que cubre cรณ...
DNS-Mayhem-CVE-2026-41096-Deep-Dive
DNS-Mayhem-CVE-2026-41096-Anรกlisis-en-Profundidad Anรกlisis tรฉcnico en profundidad de CVEโ2026โ41096, un desbordamiento de montรณn crรญtico en Windows DNSAPI.dll que permite la ejecuciรณn remota de cรณdigo a travรฉs de respuestas DNS manipuladas. Incluye vectores de ataque, informaciรณn sobre parches y...
CVE-2026-24061-POC
CVE-2026-24061 - telnetd Authentication Bypass PoC Critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards About This PoC demonstrates CVE-2026-24061 , a critical authentication bypass vulnerability in...
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-
CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- Uso Listener de reverse shell con Ncat root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...
react2shell-exploit
๐บ React2Shell-Exploit-Kensei CVE-2025-55182 - Next.js RCE Remote Code Execution Exploit framework + vulnerable lab + Burp Suite & Nuclei validation. Complete exploitation framework and vulnerable lab environment for security research and penetration testing...