CVE-2025-55182

CVE-2025-55182 React2Shell Exploit Kit 🎯 Dimostrazione completa dello sfruttamento funzionante Questo progetto fornisce una dimostrazione perfettamente funzionante di CVE-2025-55182 React2Shell – una vulnerabilità critica di esecuzione remota di codice nei React Server Components e in Next.js...

nmap-log4shell

Script NSE Nmap Log4Shell per la scoperta di Apache Log4j RCE CVE-2021-44228 nmap-log4shell è uno script NSE per la scoperta della vulnerabilità Apache Log4j RCE CVE-2021-44228 attraverso la rete. Lo script è in grado di iniettare il payload di exploit log4shell tramite header HTTP predefinito o...

pinky

Fazer upload de uma webshell é quase sempre o próximo passo após explorar uma vulnerabilidade web, mas serviços como Cloudflare e a nova geração de firewalls fazem um trabalho realmente bom impedindo que atacantes executem comandos no alvo via HTTP ou HTTPS. Por outro lado, a filtragem de conteúd...

ActiveMQ-cve-2026-42588-scanner-gui

ActiveMQ-cve-2026-42588-scanner-gui 【Exploit in un clic con VPS consigliato per chi ha un VPS】 1. Inserisci l'IP pubblico del VPS e la porta di ascolto es. 9999 2. Inserisci il comando da eseguire es: touch /tmp/cvepwned 3. Clicca su 【生成VPS命令】 → Clicca su 【复制命令】 4. Accedi al VPS via SSH, incolla ...

CVE-2024-44849

CVE-2024-44849 Autor: Extencil [email protected] CVE-2024-44849 ist eine kritische RCE-Schwachstelle, die alle vorherigen Versionen bis zu Qualitor 8.24 betrifft. Qualitor Website Die Verwendung dieses Programms, um ein Unternehmen oder System ohne gegenseitiges Einverständnis anzugreifen od...

log4j-test

Exemplo simples mostrando CVE-2021-44228 em ação Explicação Para reproduzir esse problema, estou removendo a dependência transitiva de logging do SpringBoot. Em vez disso, estou adicionando spring-boot-starter-log4j2 spring-boot-starter-log4j2 traz log4j-core, que contém a vulnerabilidade de...

Apache-Dubbo-CVE-2023-23638-exp

Per uno scanner di vulnerabilità Dubbo più completo, vedi il mio altro progetto: https://github.com/YYHYlh/Dubbo-Scan Apache-Dubbo-CVE-2023-23638-exp Pratica ingegneristica dello sfruttamento della vulnerabilità Apache Dubbo CVE-2023-23638, copre l'intero processo da discovery del servizio a...

CVE-2025-7766

CVE-2025-7766 PoC शोषण CVE-2025-7766 में XML बाहरी इकाई XXE कमजोरी का शोषण करने के लिए PoC। फ़ाइल पढ़ने /etc/passwd और आउट-ऑफ-बैंड HTTP कॉलबैक का प्रदर्शन। लेखक : Byte Reaper CVE : CVE-2025-7766 कमजोरी : XML बाहरी इकाई XXE के माध्यम से दूरस्थ कोड निष्पादन CVE-2025-7766 में XXE का शोषण करने के लिए...

CVE-2020-15368

Come sfruttare un driver Windows vulnerabile Exploit e Proof of Concept PoC per CVE-2020-15368. Asrock ha ricomprato il driver rweverything per il loro strumento di configurazione del controller RGB e lo ha firmato. Lo "proteggono" crittografando i loro ioctl... lol. Abbiamo trovato questa CVE pe...

CVE-2019-0708-poc

CVE-2019-0708-poc Rilevamento batch della vulnerabilità di esecuzione remota di codice CVE-2019-0708 3389hosts è l'elenco degli indirizzi IP da testare, uno per riga pool = ThreadPool10 è il thread pool personalizzato per la scansione Nota Ambiente Windows Python3 Utilizzo 1. Modificare 3389hosts...

CVE-2024-4577

CVE-2024-4577 Exploit di Remote Code Execution per PHP CGI Autore: Byte Reaper CVE: CVE-2024-4577 Categoria: Web Exploitation Versioni target: PHP CGI 8.1, 8.2, 8.3 Windows MIT...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Front and back end - Pages in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2023-34468-PoC

PoC CVE-2023-34468 per Apache NiFi Proof-of-concept PoC didattico per CVE-2023-34468 che riguarda Apache NiFi versioni precedenti alla 1.22.0. Questo repository dimostra come l'abuso della configurazione degli URL JDBC di H2 possa portare a esecuzione remota di codice RCE autenticata nelle...

CVE-2020-11179-Adreno-Qualcomm-GPU

Il mio lavoro indipendente a partire dal poc creato dal ricercatore P0 Ben Hawkes Articolo originale: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html Il mio obiettivo è convertire il suo poc in C e continuare da dove si era interrotto, e trasformare il poc in una...