515316 matches found
CVE-2026-23479-Redis-UAF-Proof-of-Concept
🔥 CVE-2026-23479 – Redis UAF Prova di concetto Use-After-Free in RedisunblockClientOnKey che porta all'esecuzione remota di codice Prova di concetto con sfruttamento assistito da GDB solo uso didattico / di laboratorio 📖 Panoramica CVE-2026-23479 è una vulnerabilità critica Use‑After‑Free UAF nel...
mouseserver-exploit
Mobile Mouse 3.6.0.4 RCE – Korrektur Eine korrigierte Version des Remote-Code-Execution-Exploits für Mobile Mouse 3.6.0.4, veröffentlicht als EDB-51010. Schwachstelle CVE: CVE-2023-31902 Betroffene Version: Mobile Mouse 3.6.0.4 Standard-Port: TCP/9099 Was korrigiert wurde Der ursprüngliche Exploi...
CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-
CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Programmcode Python root@kitploit: setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg',...
CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script
CVE-2026-21013 – एम्बेडेड स्क्रिप्ट के माध्यम से PDF JavaScript इंजेक्शन प्रोग्राम कोड Python जो दुर्भावनापूर्ण PDF जनरेट करता है root@kitploit: generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f:...
CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-
CVE-2026-21011 – कस्टम लॉगर में Log4j‑शैली JNDI इंजेक्शन सिम्युलेटेड प्रोग्राम कोड Python में Java सिमुलेशन root@kitploit: log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?' for...
WonderCMS-CVE-2020-35314
CVE-2020-35314 - Authentifizierte entfernte Codeausführung in WonderCMS 3.1.3 Dieses Repository wurde mit dem Ziel erstellt, die Remote Code Execution-Schwachstelle in WonderCMS v3.1.3 zu testen. Dieses gefälschte Plugin enthält eine Backdoor-PHP-Shell, die sich in der Datei evil.php befindet. Es...
CVE-2019-8601
Ausnutzung von CVE-2019-8601 Dies ist ein Exploit für eine WebKit-Schwachstelle, die ursprünglich von Fluoroacetate während des pwn2own-Wettbewerbs in Vancouver entdeckt wurde. Obwohl ich diesen Fehler nicht entdeckt habe, habe ich diesen Exploit geschrieben, um meine...
CVE-2025-59287
In questo studio, esamineremo una vulnerabilità critica CVE-2025-59287 scoperta nell'ambiente Microsoft Windows Server Update Services WSUS. Questa vulnerabilità deriva dalla deserializzazione non sicura degli oggetti AuthorizationCookie inviati all'endpoint GetCookie, dove i dati dei cookie...
redis_exploit
CVE-2025-49844 RediShell - Ambiente di Laboratorio Un ambiente di laboratorio pratico per testare e comprendere la critica vulnerabilità CVE-2025-49844 RediShell in Redis. ⚠️ AVVERTENZA Questo è solo a scopo educativo! Utilizzare solo su sistemi di tua proprietà o per cui hai esplicita...
CVE-2025-49844
CVE-2025-49844 – Use-After-Free nel parser Lua di Redis Una race condition sulla GC del nome del chunk Lua che porta a un use-after-free e all'esecuzione di codice remoto in Redis 8.2.1. Panoramica Redis incorpora Lua 5.1 per lo scripting. Nelle versioni fino alla 8.2.1 la funzione luaYparser non...
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit
CVE-2026-56158 — Exploit PoC di Esecuzione Remota di Codice RCE in .NET Framework Critico CVSS 9.8 — Deserializzazione di dati non attendibili CWE-502 in Microsoft .NET Framework e .NET Runtime Corretto: 14 luglio 2026 | Attribuito a: Positive Technologies PT-2026-60174 Indice Panoramica Dettagli...
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-67852
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72984
CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-67851
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66798
Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...