EUVD-2026-64018

Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools...

GHSA-756X-9HF6-Q4H4 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

Summary An authenticated user can upload a crafted agent bundle that defines a server-side Python callable tool. The server validates the uploaded bundle, but it does not block dangerous callable: paths in untrusted user-provided agent configs. When the tool is invoked, the runner imports and...

DNSRPC-BOF

DNSRPC-BOF Beacon Object File BOF implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by exploiting the ServerLevelPluginDll edge1 2 3 by using MS-DNSP. 4 Exploitation requires access to a user account that is a member of the DnsAdmins group...

LdrShuffle

LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules loaded at runtime. Each of theses modules has a DllMain function defined, which will be invoked on process or thread creation/destruction four possib...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite = 1.17.7 Téléversement arbitraire de fichier non authentifié via pièce jointe IMAP de CRM Email Connect Path Traversal → RCE...

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated RCE HoGent CyberSecurity II — Network Pentesting & Exploitation NPE Academic year 2025–2026 Overview This repository contains a complete lab environment and exploitation demonstration of CVE-2026-33017 , a critical unauthenticated Remote Code Execution RC...

CVE-2026-20841_notepad_analysis

Purpose Investigate the Microsoft Notepad RCE vulnerability CVE-2026-20841, perform binary analysis, and create a PoC exploit for learning purposes. Role Assignment Launch an Agent Team to execute the role assignment I have in mind. Binary Hunter: Collects binaries before and after the patch is...

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit: Идеальный результат 11/10 — червь с нулевым кликом Превратите базовую SMTP-инъекцию заголовков CVE-2026-23829 в самовоспроизводящегося RCE-червя с идеальным результатом, используя Теорию Конвергентного Времени. 📊 Трансформация результата: 6.1 → 11.0/10 ⭐ Метрика Оригинал...

CVE-2026-1306

CVE-2026-1306 — midi-Synth WordPress A Python-based, multi-target executable PoC / list runner for CVE-2026-1306 in the WordPress midi-Synth plugin. What does it do? Collects the midiSynthnonce value via HTTP from pages where the midiSynth shortcode is loaded on target sites. Sends an action=expo...

moltbot-1click-rce

This repository does not have a README...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - README.md Complet et Prêt à Copier-Coller CVE-2026-23550 | Framework d'Exploitation Massive Modular DS Auth Bypass Auteur: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

forticlient_ems_cve_2026_35616_poc.py

CVE-2026-35616 - FortiClient EMS API Authentication Bypass Detector ⚠️ CRITICAL SECURITY VULNERABILITY ⚠️ CVSS Score: 9.1 | CWE-284: Improper Access Control FortiClient EMS versions 7.4.5 through 7.4.6 📋 Description This detector identifies whether a FortiClient EMS server is vulnerable to...

laravel-8.4.2-rce

laravel-8.4.2-rce إعداد البيئة root@kitploit: git clone https://github.com/laravel/laravel.git cd laravel git checkout e849812 composer install composer require facade/ignition==2.5.1 php artisan serve الاستخدام root@kitploit: python3 exploit.py http://pwnme.me:8000...

rusty_joomla_rce

Rusty Joomla RCE Детали Технические подробности можно найти здесь: https://1day.dev/notes/Rusty-Joomla-Remote-Code-Execution...

[SECURITY] [DSA 6481-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6481-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 02, 2026 https://www.debian.org/security/faq -...

deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-

deephas = 1.0.7 – Prototype Pollution PoC CVE-2026-25047 Exploit Title: deephas = 1.0.7 - Prototype Pollution leading to Arbitrary Code Execution / DoS CVE: CVE-2026-25047 GHSA: GHSA-2733-6c58-pf27 CVSS: 9.8 Critical Author: Mohammed Idrees Banyamer Author Country: Jordan Contact: Instagram...

agent_tesla_panel_rce

agentteslapanelrce This module exploit the command injection vulnerability in control center of the agent Tesla. Setup Resources for testing are available here: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows For WebPanel1.7z unauthenticated RCE, I used WAMP server...

marshalsec

Sécurité des unmarshallers Java - Transformer vos données en exécution de code Si vous êtes ici pour Log4Shell/CVE-2021-44228, vous voudrez peut-être en savoir plus sur les vecteurs d'exploitation et les versions des environnements d'exécution Java concernées :...

halo-2.25.4-backup-write-CVE-2026-67920

Vulnérabilité d'écriture arbitraire de fichiers lors de la restauration de sauvegarde dans Halo CMS Résumé Une vulnérabilité critique d'écriture arbitraire de fichiers existe dans la fonctionnalité de restauration de sauvegarde de Halo CMS jusqu'à la version 2.25.4. La méthode restoreWorkdir dans...

CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE...