514594 matches found
WG-CVE-2026-1555-Linux
root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...
CVE-2025-27636-Apache-Camel-PoC
PoC per Apache Camel CVE-2025–27636 e CVE-2025-29891 CVE-2025–27636 e CVE-2025-29891 sono vulnerabilità in Apache Camel che interessano le versioni: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Lo sfruttamento di queste vulnerabilità può consentire agli attaccanti di eseguire metodi interni di Came...
nextjs-security-update
nextjs-security-update Ci sono persone che creano strumenti OSS per sfruttare le nuove vulnerabilità di Next.js. Questo è uno strumento per reagire: rende estremamente facile aggiornare tutte le tue app Next.js su tutti i tuoi account GitHub. Utilizza lo strumento di correzione ufficiale di Verce...
CVE-Requests-1896609
Richieste CVE 1896609 - feiskyer/mcp-kubernetes-server Riepilogo esecutivo Questo rapporto descrive due vulnerabilità di sicurezza critiche scoperte nel pacchetto feiskyer/mcp-kubernetes-server. Quando viene distribuito, il server espone uno strumento MCP chiamato kubectl, pensato per fornire un...
HG532d-RCE-Exploit
Exploit de RCE para HG532d Visão Geral Um exploit de Execução Remota de Código RCE baseado na vulnerabilidade CVE-2017-17215. Modificado a partir do código PoC original do exploit-db.com para funcionar em roteadores residenciais Huawei HG532d. Descrição Este exploit de RCE é baseado no...
Safer_PoC_CVE-2022-22965
SaferPoCCVE-2022-22965 إثبات مفهوم أكثر أمانًا لـ CVE-2022-22965 Spring4Shell الوظائف ينشئ ملفًا باسم CVE2022-22965exploited.txt في دليل tomcat 'webapps/ROOT' وسيطة اختيارية للمستخدم لتغيير دليل الإخراج يتم التحقق من الاستغلال عن طريق طلب ملف النص الناتج، واعتمادًا على تكوين tomcat الخاص بك قد...
wongpress
Sfruttamento Reale di Vulnerabilità di Buffer Overflow e Format String per Ottenere RCE su Ubuntu Server CVE Correlate CVE-2024-2961 : Vulnerabilità di buffer overflow nella funzione iconv di Glibc CVE-2024-29510 : Vulnerabilità di format string in Ghostscript interprete del linguaggio PostScript...
CVE-2021-22205
CVE-2021-22205 Fork basierend auf mr-r3bot/Gitlab-CVE-2021-22205 Einführung CVE-2021-22205: Gitlab Exploit für nicht autorisierte Remote-Codeausführung Entfernt die Abhängigkeit von djvumake & djvulibre, generiert das Payload direkt intern und kann auf Windows-Plattformen ausgeführt werden...
Log4Shell_CVE-2021-44228_related_attacks_IOCs
Log4Shell（CVE-2021-44228）related attacks IOCs Gli IP di origine utilizzano tentativi di attacco Apache Log4j RCE, che includono una grande parte di nodi Tor, vedi Attack-IP.md Per gli IOC di programmi dannosi, Botnet, ecc. che si diffondono utilizzando la vulnerabilità log4j, vedi IOC-C2.md Per l...
CVE-2022-26134-Confluence-RCE
Exploit per CVE-2022-26134: Esecuzione di codice remoto pre-autenticazione in Confluence tramite iniezione OGNL Un altro exploit nella terra di OGNL Descrizione Confluence è un wiki aziendale basato sul web sviluppato dalla società australiana Atlassian. Il 2 giugno 2022 Atlassian ha pubblicato u...
CVE-2022-22963
CVE-2022-22963 - Spring4shell Para executar a aplicação SpringBoot vulnerável, execute este contêiner docker expondo-o na porta 8080. Exemplo: root@kitploit: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Comando Curl: root@kitploit: curl -i -s -k -X $'POST' -H $'Host:...
PoC-in-GitHub
PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-67408
The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...
CVE-2026-18983
One User Avatar | User Profile Picture for WordPress is vulnerable to Stored Cross-Site Scripting (leading to potential remote code execution) in all versions up to and including 2.5.4 . The root cause is insufficient file type validation in wp_handle_upload(), called without a MIME allow-list; p...
CVE-2026-16759
Tutor LMS (WordPress eLearning plugin) versions up to and including 4.0.5 are vulnerable to unauthenticated Remote Code Execution via the tutor_course_filter_ajax AJAX action. The root cause is a missing authorization check combined with unsanitized array keys passed to extract() inside tutor_loa...
EUVD-2026-67406
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, and including, 4.0.5 via the tutorcoursefilterajax AJAX action. This is due to missing authorization on the handler...
CVE-2020-27955-LFS-main
Git-lfs Remote Code Execution RCE Exploit CVE-2020-27955 .bat / PowerShell-Version Anfällig: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken usw. Entdeckt von Dawid Golunski https://legalhackers.com https://exploitbox.io Getestet unter Windows auf: git,...
CVE-2025-55182-poc
CVE-2025-55182 Proof of Concept Kritische Pre-Authentication Remote Code Execution in React Server-Komponenten Ein vollständiger Proof-of-Concept, der CVE-2025-55182 demonstriert, eine kritische Schwachstelle in [email protected], die es nicht authentifizierten Angreifern ermöglicht,...