CVE-2026-82079

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-0310

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

CVE-2023-27350

PaperCut NG/MG RCE（CVE-2023-27350） 一个精简的 Bash 漏洞利用脚本，用于 CVE-2023-27350。该脚本自动化了认证绕过、环境准备以及通过 PaperCut 打印机脚本引擎进行的命令注入。 可视化验证 基本 RCE： 触发反向 Shell： 快速开始 root@kitploit: Clone the repository git clone https://github.com/dezso-dfield/CVE-2023-27350.git Enter the directory cd CVE-2023-27350 Make the scrip...

Important: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in mod_ldap per-directory configuration

A flaw was found in Apache HTTP Server when using the modldap module in a per-directory configuration. This use-after-free vulnerability allows a remote attacker to potentially execute arbitrary code or cause a denial of service DoS due to improper memory handling. This could lead to system...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via untrusted content in mod_xml2enc

A flaw was found in Apache HTTP Server, specifically within the modxml2enc module. This heap-based buffer overflow vulnerability can be triggered when processing untrusted content through the xml2StartParse function. A remote attacker could potentially exploit this to cause a denial of service,...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning

A flaw was found in the Linux kernel's ixgbevf network driver. This vulnerability, a use-after-free, occurs when the driver attempts to process network packets for a specific multicast workaround. An attacker could potentially exploit this by sending specially crafted network traffic, which may...

kernel: tipc: clear sock->sk on the failed-insert path in tipc_sk_create()

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipcskcreate function to leave a dangling pointer to a freed socket object. This...

CVE-2025-32433

CVE-2025-32433 引言 本文件介绍了影响 Erlang/OTP 平台内置 SSH 服务器实现的漏洞 CVE-2025-32433 。 该漏洞是一种无需身份验证即可远程执行任意代码 RCE 的漏洞，影响多个 Erlang/OTP 分支（补丁发布前）： 27 版本至 27.3.3 26 版本至 26.2.5.11 25 版本至 25.3.2.20 Erlang/OTP 被广泛用作可扩展分布式系统的基础，并集成在许多知名项目的技术栈中（例如即时通讯软件、消息代理、高负载 Web 服务）。 SSH 基础库中存在关键的 RCE 漏洞，使得使用 Erlang/OTP 作为服务器或具有开放...

CVE-2026-0303

CVE-2026-0303 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates when the holder publicizes the vulnerability.

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

EUVD-2026-75269

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

CVE-2025-55182-test

React2shell 概念验证 - CVE-2025-66478 此仓库包含一个针对 CVE-2025-66478 的 React/Next.js 概念验证项目。 项目结构 my-cve-2025-66478-app/ - 用于 React2shell 概念验证的 Next.js 应用 技术栈 Next.js 16.0.6 React 19.2.0 TypeScript Tailwind CSS v4 快速开始 1. 进入应用目录： root@kitploit: cd my-cve-2025-66478-app 2. 安装依赖： root@kitploit: npm install 3...

mvn_pwn

MVN PWN 使用 "groovy-maven-plugin" 实现 RCE 的恶意 Maven pom.xml 包含完整依赖的载荷可在以下博客中找到： https://security.humanativaspa.it/abusing-mavens-pom-xml/...

EUVD-2026-75268

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus 一个针对CVE-2026-38526的PoC脚本，通过webkul krayin 2.2.x的/admin/tinymce/upload端点中的文件上传漏洞实现远程代码执行（专为htb-nexus构建） 🛠 快速开始和使用 1. 克隆仓库： root@kitploit: git clone https://github.com/Resolvdd/CVE-2026-38526-PoC-htb-nexus.git cd CVE-2026-38526-PoC-htb-nexus 2. 创建Python虚拟环境： root@kitploi...

CVE-2025-5548

🛡️ 分析与利用：CVE-2025-5548 网络安全硕士 | 模块 6：漏洞 👋 你好！欢迎来到我的分析工坊 在本仓库中，我记录了自己在二进制级别漏洞分析与Windows环境漏洞利用开发方面的实践探索。 本实验室的主要目标是内化技术方法，从发现内存损坏缺陷（堆栈缓冲区溢出 ）开始，直到利用CVE-2025-5548 实现远程代码执行（RCE ）。 这不仅关乎运行工具，更在于理解内存如何被破坏、如何控制执行流程（EIP寄存器），以及如何绕过限制注入我们自己的Shellcode 。 📂 仓库结构 为了保持项目有序并模拟分析师真实工作流程，我将研究分为两个主要阶段： 🛠️...

CVE-2024-5932

CVE-2024-5932 ★ CVE-2024-5932 任意文件删除与 RCE 概念验证 ★ https://github.com/user-attachments/assets/333e347a-fd71-404a-962b-2d0d4bb952c7 时间线 8月25日 ：上传 CVE-2024-5932 文件删除 PoC 8月26日 ：我们已通过 CVE-2024-5932 成功执行任意命令，但由于影响范围考虑是否披露。 8月27日 ：我们在 RCE Security 的 Julien Ahrens 的 文章 中找到了 PoC 的详细分析，决定发布我们的 RCE...