CVE-2021-3490

El seguimiento de límites ALU32 de eBPF para operaciones bit a bit AND, OR y XOR en el kernel de Linux no actualizaba correctamente los límites de 32 bits, lo que podría convertirse en lecturas y escrituras fuera de los límites en el kernel de Linux y, por lo tanto, en ejecución arbitraria de...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Descripción CVE-2022-25765 es una vulnerabilidad de inyección de comandos Command Injection que afecta a pdfkit Ruby gem en versiones 0.8.7.2. La vulnerabilidad tiene una severidad CRÍTICA con CVSS 9.8, ya que permite ejecución remota de comandos sin...

log4shell

Log4Shell CVE-2021-44228 — Research Report A self-contained technical report on Log4Shell , the critical Remote Code Execution vulnerability in Apache Log4j 2 disclosed in December 2021. Covers root cause analysis, the full attack chain, detection/mitigation guidance, and an end-to-end exploit...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 o 6.0 - Exploit de Ejecución Remota de Código Para instalar los requisitos, ejecuta: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Así se usa el exploit: root@kitploit: $ pyth...

CVE-2021-38304-PoC

CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Descripción breve Apache Log4j2 2.0-beta9 hasta 2.15.0 excepto las versiones 2.12.2, 2.12.3 y 2.3.1 Las funciones JNDI utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra endpoints LDAP controlados por el atacante y otros endpoint...

CVE-2026-89040

Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...

CVE-2026-76694

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

CVE-2026-76690

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76685

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2026-76689

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-76683

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

CVE-2026-76682

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76674

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

CVE-2026-76676

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...

CVE-2026-51133

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Ejecución remota de código root@kitploit: Fecha: 16 de abril de 2023 Autor del exploit: Việt Hùng https://github.com/phanthibichtram12 Sitio web del proveedor: https://elementor.com/ Enlace del software:...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload Visita https://phankz.com...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Ejecución remota de código RCE Autenticado root@kitploit: Fecha: 05 de noviembre de 2023 Autor del exploit: Việt HÙng https://github.com/phanthibichtram12 Sitio web del proveedor: https://www.wpallimport.com/ Enlace del software:...