CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 Una vulnerabilità di esecuzione remota di codice è stata trovata in Samba. Un client samba autenticato malintenzionato, con accesso in scrittura alla condivisione samba, potrebbe utilizzare questa vulnerabilità per eseguire codice arbitrario come root...

Vulnerabilities found in Oracle Financial Services

Oracle has identified vulnerabilities in various Financial Services Enterprise modules. These vulnerabilities exist in third-party products such as Apache Kafka, Log4j, and the Spring Framework. Updates have been released by the developers for these products. These updates are now integrated into...

SUSE-SU-2026:3649-1 Security update for python313

This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. - CVE-2026-0864: improper handling of...

CVE-2026-76034

A flaw was found in Chromium's WebGL component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox, allowing the attacker to gain control over the affected syste...

CVE-2026-76047

A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...

CVE-2026-76038

A flaw was found in V8, the open-source JavaScript engine used in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential...

CVE-2026-76037

A flaw was found in Google Chrome. A local attacker could exploit a link following vulnerability within the CredentialProvider component. This vulnerability allows for the execution of arbitrary code outside the browser's security sandbox through a local program. Mitigation Mitigation for this...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

Vulnerabilities found in Oracle Communications

Oracle has identified vulnerabilities in various communication modules, including Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search, and Oracle Communications Unified Inventory Management. These vulnerabilities include stack-based buffer overflows,...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...

CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

OHTS

OHTS CVE-2017-8759 | Sicherheitslücke im .NET Framework bei der Remotecodeausführung 1. Einleitung Eine Sicherheitslücke bei der Remotecodeausführung besteht, wenn Microsoft .NET Framework nicht vertrauenswürdige Eingaben verarbeitet. Ein Angreifer, der diese Sicherheitslücke in Software, die das...

exploit-CVE-2015-8351

Gwolle Guestbook WordPress Plugin RFI Exploit Dieses Python-Skript nutzt eine kritische Remote File Inclusion RFI-Schwachstelle im Gwolle Guestbook WordPress Plugin aus, die von einem nicht authentifizierten Angreifer ausgenutzt werden kann, um eine entfernte PHP-Datei einzubinden und beliebigen...

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

Dieses Repository hat keine README-Datei...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Este é um exploit do CVE-2019-16278 para Nostromo 1.9.6 RCE. Este exploit permite RCE na máquina vítima. Requisitos optparse socat sys Uso Você pode usar o exploit da seguinte forma: root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80...

CVE-2020-11108-PoC

CVE-2020-11108-PoC इस रिपॉजिटरी में दो PoCs हैं। cve-2020-11108-rce.py आपको www-data उपयोगकर्ता के रूप में एक शेल देगा। root-cve-2020-11108-rce.py आपको एक शेल देगा और विशेषाधिकारों को root तक बढ़ाएगा। नोट: यह विनाशकारी है क्योंकि हमें teleporter.php को ओवरराइट करना होगा। पूर्ण विवरण/राइटअप के लिए...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 Dies ist ein Exploit für CVE-2021-3205, eine Websicherheitslücke zur Befehlseinschleusung im search.php-Pfad. Dieser Exploit ermöglicht die Ausführung von Befehlen. Anforderungen optparse, signal, requests Verwendung root@kitploit: ❯ python3 CVE-2021-3205.py --url...

BIT-POSTGRESQL-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before...

BIT-POSTGRESQL-2026-19385 PostgreSQL pg_dump heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...

BIT-POSTGRESQL-2026-18408 PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-871...