CVE-2026-81983

Acrobat Reader is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vec...

EUVD-2026-74193

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-79908

Adobe Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ...

CVE-2026-79908 Acrobat Reader | Out-of-bounds Write (CWE-787)

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81975 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-74194

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81975

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local a...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

EUVD-2026-44397

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability...

CVE-2019-9202

CVE-2019-9202 Exploit de ejecución remota de código en Nagios IM 2.6: CSRF + SQLi + RCE + LPE → root remoto Descripción Encadenando una falsificación de petición entre sitios CSRF / omisión de autorización CVE-2019-9203 es posible explotar una inyección SQL basada en UNION CVE-2019-9204, una...

GHSA-92F5-VC22-8J33 Microsoft QUIC: Remote Code Execution Vulnerability

Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. Details New network path creations and removals triggered by incoming packets can lead to a pointer invalidation. Patches - Guard path promotion e0f55b5 Impact An unauthenticated attacker coul...

EUVD-2026-56392

Microsoft QUIC: Remote Code Execution Vulnerability...

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell RCE in Webmin target url c - creds for webmin sl - your local server IP and port to host your payload s - callback ip p - callback port References https://www.webmin.com/security.html https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/...

CVE-2023-3722

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device Services Unrestricted File Upload RCE. This script will use a PUT request to upload a php file with an eight-digit randomly generated filename. Then it will make a GET request to retrieve this file and parse the output to get the comman...

CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. Compile: gcc -o pwn pwn.c && gcc -o exploit exploit.c...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Descripción CVE-2022-25765 es una vulnerabilidad de inyección de comandos Command Injection que afecta a pdfkit Ruby gem en versiones 0.8.7.2. La vulnerabilidad tiene una severidad CRÍTICA con CVSS 9.8, ya que permite ejecución remota de comandos sin...

log4shell

Log4Shell CVE-2021-44228 — Research Report A self-contained technical report on Log4Shell , the critical Remote Code Execution vulnerability in Apache Log4j 2 disclosed in December 2021. Covers root cause analysis, the full attack chain, detection/mitigation guidance, and an end-to-end exploit...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 payload builder & exploit Info / Help root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | |...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Instale las bibliotecas necesarias con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concept Critical Security Vulnerability Demo - CVSS 10.0 - Remote Code Execution in React Server Components ⚠️DISCLAIMER FOR EDUCATIONAL PURPOSES ONLY! This repository demonstrates a critical security vulnerability. Never use on production...