514550 matches found
EUVD-2026-67175
The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page. Spring for GraphQL 2.0.0 - 2.0.4 Spring...
CVE-2026-59286
Spring for GraphQL versions 1.0.0–1.0.7, 1.1.0–1.3.9, 1.4.0–1.4.6, and 2.0.0–2.0.4 are affected. The bundled GraphiQL page loads JavaScript libraries from a public CDN without Subresource Integrity checks, allowing an attacker to inject malicious code into those scripts and execute arbitrary code...
CVE-2019-2725
CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 costruttore di payload & exploit Info / Aiuto root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal...
CVE-2018-7600
Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Installa le librerie richieste con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTI...
CVE-2017-5645
CVE-2017-5645 CVE-2017-5645 - Apache Log4j RCE aufgrund unsicherer Deserialisierung...
CVE-2017-1000486
CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 oder 6.0 - Exploit für Remote Code Execution Um die Anforderungen zu installieren, führen Sie aus: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Hier ist die Verwendung des...
CVE-2026-76221
A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code...
CVE-2026-76218
A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...
CVE-2020-11651-poc
Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è un exploit proof of concept basato sullo script di controllo iniziale. Usalo per verificare di aver aggiornato correttamente i tuoi server Salt master a una release contenente le correzioni necessarie. Grazie a F-Secure Labs per la loro...
Log4Shell-CVE-2021-44228-PoC
Log4Shell CVE-2021-44228: संक्षिप्त विवरण Apache Log4j2 2.0-beta9 से 2.15.0 तक रिलीज 2.12.2, 2.12.3, और 2.3.1 को छोड़कर कॉन्फ़िगरेशन, लॉग संदेशों और पैरामीटर में उपयोग की जाने वाली JNDI सुविधाएँ हमलावर-नियंत्रित LDAP और अन्य JNDI-संबंधित एंडपॉइंट से सुरक्षा नहीं करती हैं। एक हमलावर जो लॉग संदेशों...
CVE-2024-21683-RCE
Verwendung python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...
opmonster
OpMonster CVE-2020-8636 — exploit di esecuzione remota di codice con autenticazione per Opmon Informazioni • Installazione • Utilizzo • Licenza Informazioni OpMonster è un exploit proof-of-concept per CVE-2020-8636 , una vulnerabilità di esecuzione remota di codice nella piattaforma di monitoragg...
CVE-2024-4577
Iniezione di argomenti in PHP CGI CVE-2024-4577 RCE 📜 Descrizione Nelle versioni di PHP 8.1. precedenti alla 8.1.29, 8.2. precedenti alla 8.2.20 e 8.3. precedenti alla 8.3.8, quando si utilizzano Apache e PHP-CGI su Windows, se il sistema è configurato per usare determinate code page, Windows può...
CVE-2021-38304-PoC
CVE-2021-38304 Prova di concetto Panoramica Questa repository contiene una prova di concetto per una vulnerabilità di sicurezza critica nelle versioni precedenti del driver nipalk.sys di National Instruments. La vulnerabilità consente l'esecuzione arbitraria di codice e la divulgazione di memoria...
CVE-2026-76640
Unitree G1 EDU firmware through 1.5.2 contains chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow an unauthenticated proximate attacker to achieve root code execution (uid 0) without pairing or credentials. The root cause involves an unquoted heredoc variable in...
EUVD-2026-67166
Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unquoted heredoc variable in the WiFi...
CVE-2022-1565
Plugin WordPress WP All Import = 3.6.7 - Esecuzione di codice da remoto RCE Autenticato root@kitploit: Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm:...
CVE-2022-1329
WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Datum: 16. April 2023 Exploit-Autor: Việt Hùng https://github.com/phanthibichtram12 Anbieter-Website: https://elementor.com/ Software-Link: https://wordpress.org/plugins/elementor/advanced/ nach unten scrollen und...
EUVD-2026-67165
Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...