517702 matches found
DS-Wireless-Communication-Remote-Code-Execution
DS 无线通信远程代码执行 将任意代码注入客户端游戏。 前置要求 Python 3.10 pip pydivert 使用方法 root@kitploit: pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py CVE-ID CVE-2023-45887 许可证 GNU 通用公共许可证 v2.0...
cve-2019-11043
PHP 远程代码执行漏洞 （CVE-2019-11043） 1. 背景 9 月 26 日，PHP 官方发布漏洞通告，其中指出：使用 Nginx + php-fpm 的服务器，在部分配置下，存在远程代码执行漏洞。并且该配置已被广泛使用，危害较大。 漏洞 PoC 在 10 月 22 日公开，国内安全媒体及时发布了预警。 2. 漏洞描述 Nginx 上 fastcgisplitpathinfo 在处理带有 %0a 的请求时，会因为遇到换行符 \n 导致 PATHINFO 为空。而 php-fpm 在处理 PATHINFO...
CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check
CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check 检查你的防火墙是否易受 CVE-2024-21762（无需认证的远程代码执行）攻击 有关该漏洞的更多信息：https://cuty.io/TKyfFh 订阅或加入我的社交媒体获取更多黑客相关资讯！！ 学习如何检测漏洞并保护你的企业 YouTube 视频：https://cuty.io/1hkzLCN 前提条件 克隆 GitHub 仓库 root@kitploit: git clone...
CVE-2021-46422_RCE
CVE-2021-46422 RCE 安装 root@kitploit: git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2021-46422 RCE.py放到pocsuite3\pocs目录下 cd pocs pocsuite3使用 单个url: root@kitploit: pocsuite -r CVE-2021-46422 RCE.py -u url 多个url:...
CVE-2026-79675
A flaw was found in NLTK. When processing untrusted input for its per-call options parameter in the java function, NLTK fails to validate Java Virtual Machine JVM options. A remote attacker could exploit this by injecting dangerous JVM flags, such as -agentpath or -javaagent, to achieve arbitrary...
CVE-2025-71408
A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...
CVE-2026-11613
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 5.1.2 , via the custom_loop_template parameter. Unauthenticated attackers can include and execute arbitrary .php files on the server, potentially bypassing access controls, obtainin...
CVE-2021-22205
CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...
isf
Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...
CVE-2026-45034
🧨 PHPSpreadsheet Phar 反序列化漏洞利用 绕过prohibitWrappers 并对 phpoffice/phpspreadsheet 实现远程代码执行 RCE 本仓库为广受欢迎的 PHP 库 PHPSpreadsheet 中的一个严重漏洞提供了概念验证 PoC 漏洞利用。该攻击滥用 phar:// 包装器 触发对象反序列化，从而在受影响版本上绕过安全防护 ，甚至实现完全远程代码执行 。 ⚡ 漏洞概述 版本| 状态| 描述 ---|---|--- 5.7.0 （最新 5.x）| ✅ 绕过| 可以绕过 prohibitWrappers 保护，但可能缺少 RCE gadg...
PowerSploit
This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following modules and scripts: CodeExecution Execute code on a target machine...
CVE-2021-31166
CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...
panos-captive-portal-rce
CVE-2026-0300 — PAN-OS User-ID Captive Portal Buffer Overflow RCE Scanner...
haxx
haxx iOS 14 - iOS 14.8.1 で root としてテザリング不要 + サンドボックス解除のコード実行 haxx。 CoreTrustDemo に基づいています。また、証明書は著作権の対象ではないことに注意してください。 使い方 注: macOS と既存の脱獄が必要です。 セットアップと実行 この方法は 14.0～14.6 で動作します。14.7 14.7b1～14.8.1 では launchd の置き換えが必要です（launchd.c 参照）。これは安全性が低くなります。 1. Procursus Team の ldid がインストールされていることを確認します。 2...
haxx
haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...
kernel: pNFS: Fix use-after-free in pnfs_update_layout()
A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...
kernel: crypto: qat - validate RSA CRT component lengths
A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...
kernel: smb: client: fix query directory replay double-free
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the client attempts to free the same memory buffer twice during a directory query operation. An attacker could potentially exploit this flaw to cause memory corruption,...
kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation
A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...