cve-2025-24813-poc

CVE-2025-24813 Exploit PoC per RCE su Apache Tomcat Questo repository contiene un exploit proof-of-concept per CVE-2025-24813, una vulnerabilità di deserializzazione Java in Apache Tomcat. Basato su absholi7ly/POC-CVE-2025-24813/. Prerequisiti Docker Configurazione 1. Installa le dipendenze: uv...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.0 5.5.4 - 'widgetphp ' Esecuzione di codice remoto non autenticata Console a riga di comando interattiva per CVE-2019-16759 Utilizzo: python3 exploit.py Inserisci il sito con Http/Https e ottieni la shell :p...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Ehi, in questo lab di LetsDefend mi sono immerso in una zero-day di SharePoint chiamata ToolShell CVE-2025-53770. In pratica, ho replicato un attacco reale in cui una richiesta POST maliziosa bypassava l'autenticazione, eseguiva...

l4j-info

l4j-info Compiling valuable links as I find them documenting CVE-2021-44228 or Log4J Critical First Party advisories: Existing Log4J 1.2 vulnerability CVE-2019-17571 is also potentially present Apache Log4J Version 2.x Security Information VMWare critical vulnerability advisory Cisco product...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC per CVE-2019-5736 Creato con l'aiuto di @singe, @cablethief e @feexd Testato su Ubuntu 18.04, Debian 9 e Arch Linux. Versioni Docker 18.09.1-ce e 18.03.1-ce. Questa PoC attualmente non funziona con Ubuntu 16.04 e CentOS. Vai a dare un'occhiata al codice dell'exploit di Drago...

CVE-2016-10033

PoC per CVE-2016-10033 RCE contro WordPress 4.6 uso: ./CVE-2016-10033.py esempio: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Porting Python +modifiche di https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Richiesto: Requests pip install requests Non ho...

CVE-2017-0199-Fix

Fix per CVE-2017-0199 Rimuovi la capacità di CVE-2017-0199 di eseguire codice modificando il gestore predefinito per i file .hta. Il gestore predefinito per i file richiamati tramite OLE2 oggetti COM è archiviato separatamente dall'applicazione predefinita del sistema locale e può essere modifica...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: strumento all-in-one per la vulnerabilità RCE da bypass del certificato client in 1Panel scansione + exploit Introduzione alla vulnerabilità 1Panel è un pannello di gestione operativa Linux open source e moderno che fornisce un'interfaccia grafica per distribuire si...

CVE-2024-3094

Security Review & Threat Model: CVE-2024-3094 xz-utils / OpenSSH This repository contains the results of analyzing the critical vulnerability CVE-2024-3094 backdoor in the liblzma library of the xz-utils package, leading to RCE via the OpenSSH process. As part of the project, an isolated test...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

CVE-2026-88131

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network...

CVE-2026-77900

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network...

DEBIAN-CVE-2026-107651

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

CVE-2026-107651

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

CVE-2024-44849

CVE-2024-44849 Autor: Extencil [email protected] CVE-2024-44849 ist eine kritische RCE-Schwachstelle, die alle vorherigen Versionen bis zu Qualitor 8.24 betrifft. Qualitor Website Die Verwendung dieses Programms, um ein Unternehmen oder System ohne gegenseitiges Einverständnis anzugreifen od...

OpenSSH-CVE-2024-6387-Fix

Script di Mitigazione della Vulnerabilità CVE-2024-6387 in OpenSSH Panoramica Questo script Bash è progettato per aiutare a mitigare la vulnerabilità CVE-2024-6387 in OpenSSH. La vulnerabilità interessa alcune versioni di OpenSSH e può potenzialmente consentire a utenti remoti non autenticati di...