523135 matches found
CVE-2018-8284-Sharepoint-RCE
CVE-2018-8284-Sharepoint-RCE...
cve-2019-3396
cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries root@kitploit: bundle install run root@kitploit: āāāuserćæhostname-/path/to/cve-2019-3396 āā$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahma...
CVE-2020-35729
InformaciĆ³n root@kitploit: Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...
CVE-2021-24155.rb
WordPress-Backup-RCE Este mĆ³dulo de Metasploit permite a un atacante con una cuenta privilegiada de WordPress lanzar una shell inversa debido a una vulnerabilidad de carga de archivos arbitraria en el plugin de WordPress Backup Guard versiones anteriores a la 1.6.0. Esto se debe a una verificaciĆ³...
BiblioRCE
Un descuido en BiblioCraft que permite la manipulaciĆ³n restringida de archivos en el lado del servidor. Ā”Este mĆ©todo solo requiere BiblioCraft! No demasiado trucos y no se necesitan otros mods para lograr la ejecuciĆ³n de cĆ³digo. CoreTweaks El informe original centrado en CoreTweaks se puede...
CVE-2026-13768
CVE-2026-13768: Credencial Privilegiada de IoT Hub ā EnumeraciĆ³n de Flota, RCE en Dispositivos y Pivote en la Red DomĆ©stica Aviso Campo| Valor ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 CrĆtico Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L Vector 4.0...
CVE-2023-27326
Escape de VM de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop. El exploit fue...
CVE-2022-1388
Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...
CVE-2020-12753-PoC
CVE-2020-12753-PoC Este repositorio contiene una prueba de concepto para šš±āļøš„¾š, una vulnerabilidad SBL1/aboot para ejecuciĆ³n de cĆ³digo arbitrario en Secure EL3 en el LG Stylo 4 AMZ/Q710ULM. Solo se ha probado en las actualizaciones 20a y 20c y con la variante SBL1 de la vulnerabilidad...
CVE-2023-38146-Poc
PoC para el exploit ThemeBleed CVE-2023-38146 Temas de Windows 11 Fuertemente inspirado por https://github.com/gabe-k/themebleed que solo funciona en Windows la razĆ³n por la que decidĆ escribir esto. UsĆ© cĆ³digo modificado de impacket smbserver.py...
USN-8739-2 imagemagick vulnerabilities
USN-8739-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue...
CVE-2026-90945
Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...
CVE-2026-54567
Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.savestorage, name=... in src/flaskuploads/flaskuploads.py applies lowercaseext to the default upload path but uses the case-preserving extension helper for a caller-supplied name before extensionallowed evaluates ...
CVE-2026-54177
backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...
CVE-2026-12277
CVE-2026-12277 Plugin Frontend File Manager WordPress = 23.6 - EliminaciĆ³n arbitraria de archivos sin autenticar que deriva en RCE Resumen...
BlueGate-CVE-2020-0609
RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-0610 Remote Validation Tool A small check-only Python utility for remotely validating the patch behavior associated with the Microsoft Remote Desktop Gateway vulnerabilities: CVE-2020-0609 CVE-2020-0610 The vulnerabilities, commonly associate...
nginx:1.26 security update
An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...
nginx:1.24 security update
An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...
RLSA-2026:67308 Moderate: nginx:1.24 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...
RLSA-2026:67283 Moderate: nginx:1.26 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...