CVE-2026-38821

openNDS before 11.0.0 is affected by a heap-based buffer overflow in the file http_microhttpd.c . An unauthenticated attacker on the captive portal network can crash the openNDS daemon (denial of service) and potentially achieve remote code execution . The attack requires high complexity (CVSS 3....

EUVD-2026-67361

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2018-3191

Vulnerabilità di esecuzione remota di comandi Weblogic-CVE-2018-3191 Ambiente weblogic per Docker 0x00 Introduzione Il 17 ottobre, Oracle ha rilasciato il Critical Patch Update CPU di ottobre, risolvendo una vulnerabilità critica di esecuzione remota di codice in WebLogic CVE-2018-3191. Questa...

CVE-2025-55182

CVE-2025-55182 RCE Ferramenta de verificação pessoal para verificar a vulnerabilidade CVE-2025-55182 Princípio da vulnerabilidade Os React Server Components, ao decodificar o payload enviado ao endpoint da função do servidor, apresentam uma falha na resolução de caminhos. Eles usam dois pontos pa...

CVE-2022-20607

CVE-2022-20607 Nel firmware cellulare Pixel, è possibile una scrittura fuori dai limiti a causa di un controllo dei limiti mancante. Ciò potrebbe portare all'esecuzione remota di codice con autenticazione LTE necessaria. L'interazione dell'utente non è necessaria per lo sfruttamento.Prodotto:...

rschunter

RSC Hunter Uno scanner e strumento di exploit potente e multi-thread per le vulnerabilità dei React Server Component RSC. Questo strumento è progettato per identificare e sfruttare vulnerabilità RCE nelle implementazioni RSC, supportando varie tecniche e strategie di bypass. Nota : Data l'enorme...

inceptor

🚩 Dies ist das öffentliche Repository von Inceptor. Für die neueste Version und Updates unterstützen Sie uns bitte über https://porchetta.industries/ 🚩 Sponsoren Wenn Sie dieses Projekt sponsern möchten und die neuesten Updates zu Inceptor, die neuesten behobenen Probleme und die neuesten...

CiscoExploit

CiscoExploit Cisco-Scan IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure Remotecodeausführung https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...

CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC यह प्रोजेक्ट CVE-2025-55182 - React Server Components RSC RCE Proof of Concept है, जो दर्शाता है कि विशिष्ट परिस्थितियों में vm.runInThisContext और दुर्भावनापूर्ण ACTION payload के माध्यम से रिमोट कोड एक्ज़ीक्यूशन RCE ट्रिगर किया जा सकता है। Python...

vpwn

vpwn von qwertyoruiop Generische xnu Heap-Overflow-Exploitation. Demo-Ausgabe: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local...

log4j-CVE-2021-44228

log4j-CVE-2021-44228 5 दिसंबर, 2021 को, Apache ने अपनी व्यापक रूप से उपयोग की जाने वाली Log4j लॉगिंग सेवा में एक कमजोरी की पहचान की जिसे बाद में CVE-2021-44228 के रूप में पहचाना गया। यह कमजोरी, जिसे Log4shell के नाम से भी जाना जाता है, हमलावरों को प्रभावित सर्वरों का पूर्ण नियंत्रण प्राप्त करने म...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusando di CVE-2024-2961 e CVE-2023–26326 per RCE Utilizzo root@kitploit: git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analisi e...

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — noto anche come CVE-2021-44228 — è una vulnerabilità critica che consente l'esecuzione remota di codice nei sistemi che utilizzano Log4j della Apache Foundation, una libreria Java open-source ampiamente utilizzata in prodotti software commerciali e open-source e...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway Im ersten Quartal 2022 wurde eine interessante und kritische Basisbewertung 10.0 Sicherheitslücke in Spring Cloud Gateway entdeckt, die eine Code-Injection über die Actuator-API zur Durchführung von SpEL-Injection ermöglicht und potenziell zu ein...

Drupal-cve-2019-6340

Forschung CVE 2019-6340 root@kitploit: Die Website als Drupal 8 Core RESTful API Services Modul wird aktiviert und erlaubt dem Benutzer, GET-, PATCH- oder POST-Anfragen an den Server zu senden. Eine GET-Anfrage reicht aus, um die Codeausführung-Schwachstelle auszulösen, auch wenn die PATCH-Method...

CVE-2017-7494

CVE-2017-7494 استغلال يمنح صلاحيات الجذر عن بُعد لثغرة SAMBA CVE-2017-7494. التفاصيل ينقسم هذا الاستغلال إلى جزأين: أولاً، يقوم بتجميع حمولة تُسمى "implant.c" وينشئ مكتبة libimplantx32.so أو libimplantx64.so تقوم بالتبديل إلى مستخدم الجذر، والانفصال عن العملية الأم، وتشغيل شل عكسي. ثانياً، يبحث ع...

CVE-2020-1350

Warnung Dieses Repository wurde archiviert und wird nicht mehr aktiv gepflegt. CVE-2020-1350 Dieses PowerShell-Skript überprüft, ob Ihr Server anfällig für die Sicherheitslücke CVE-2020-1350 Remote Code Execution im Windows DNS-Dienst ist. Unterstützte Betriebssysteme für dieses Workaround-Skript...

CVE-2025-32433

Ricerca sulla sicurezza di Erlang/OTP SSH CVE-2025-32433 Exploit proof-of-concept Python CVE-2025-32433 Esecuzione di codice remoto non autenticata in Erlang/OTP SSH. Ho anche un template Nuclei per banner grabbing e un controllo Nuclei RCE. I log IDS di Suricata e Zeek sono in ordine basati su u...

CVE-2023-47268

Esecuzione Arbitraria di Codice in PrusaSlicer Escalation dei privilegi utilizzando un file .3mf con una versione vulnerabile di prusaslicer. Assicurati di poter eseguire prusaslicer con sudo. Linux 1.Scarica i file 2.Modifica IP e PORT in exploit.sh 3.Assicurati di avere exploit.sh nella directo...

CIMCown

CIMCown CVE-2026-20200 Injection di argomenti in Cisco IMC con RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...