CVE-2025-60751

CVE-2025-60751 PoC für CVE-2025-60751 Betroffenes Produkt: Geographiclib = v2.5.1 Der vollständige Artikel ist verfügbar unter https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Beschreibung Ein Stack-Pufferüberlauf tritt auf, wenn GeoConvert eine präparierte Eingabe...

cupshax

CUPSHax Schneller Proof of Concept für den aktuellen CUPS-Exploit. Ich hatte vor, das Ganze noch viel mehr aufzuräumen, aber die Embargo-Frist wurde viel früher aufgehoben als erwartet, daher ist der Code etwas überstürzt. Für alle technischen Details solltest du ehrlich gesagt einfach Evilsocket...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Esecuzione di codice in remoto PHPMailer è la classe di trasporto più popolare al mondo, con circa 9 milioni di utenti in tutto il mondo. I download continuano a un ritmo significativo ogni giorno. Utilizzato da molti progetti open-source: WordPress, Drupal, 1CRM, SugarCRM, Yii,...

magnolia-rce

Titolo Exploit: Magnolia DX Core 6.3.8 - Iniezione di comandi Data: 05/16/2025 Autore Exploit: tmrswrr Versione: 6.3.8 Home page del fornitore: https://docs.magnolia-cms.com/home/ Prodotto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Autenticat...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for cve-2018-8453. Development/Test platform: x86: Windows 10 RS2 15063 x64: Windows 10 RS2 16299 Note: Uses Palette to read and write kernel memory. Serious Disclaimer: This tool is only for technical research and learning. Any...

cve-2024-32651

cve-2024-32651 changedetection RCE durch SSTI...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell Von KI erstellter Revshell PoC Ungetestete Vervollständigung des Redishell PoC, erstellt von KI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua...

CVE-2025-3248

CVE-2025-3248 — Exploit de RCE no Langflow Exploit de execução remota de código RCE para aplicações Langflow vulneráveis à CVE-2025-3248. Endpoint Afetado: /api/v1/validate/code 🚀 Recursos do Exploit 🔓 RCE remoto e sem autenticação 🔐 Nenhuma autenticação necessária 🐍 Script Python3 de uma linha...

CVE-2022-22965-rexbb

CVE-2022-22965-rexbb Vulnerabilità di esecuzione comandi in Spring Boot Core, strumento di exploit per CVE-2022-22965, sviluppato con JavaFx: le operazioni grafiche rendono tutto più semplice e aumentano l'efficienza. 28 dicembre 2022 - mercoledì - 21:44 In questi giorni stavo facendo la...

r2s

React2Shell R2S - Strumento di test per CVE-2025-55182 Strumento avanzato di test di sfruttamento per la valutazione della vulnerabilità CVE-2025-55182 Caratteristiche • Installazione • Utilizzo • Ambiente di test • Legale 📖 Cos'è R2S? R2S React2Shell è uno strumento di test di sicurezza progetta...

CVE-2023-41425

CVE-2023-41425 Descrizione La vulnerabilità Cross Site Scripting in Wonder CMS v.3.2.0 fino alla v.3.4.2 consente a un attaccante remoto di eseguire codice arbitrario tramite uno script appositamente creato caricato nel componente installModule. Funzionamento L'exploit allegato "exploit.py" esegu...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Remote Code Execution RCE Referenzen: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2023-36845

CVE-2023-36845 Utilizzo? bash cve.sh yourfile.txt Riferimenti: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

vuln-app-CVE-2025-55182

Verwundbare Next.js-RSC-Anwendung - CVE-2025-55182 ⚠️ WARNUNG: Diese Anwendung ist absichtlich verwundbar und ausschließlich für Bildungs- und Sicherheitsforschungszwecke gedacht. NICHT in Produktion bereitstellen oder dem Internet aussetzen. Übersicht Dies ist eine verwundbare Next.js-Anwendung,...

CVE-2025-55182-advanced-scanner-

Scanner CVE-2025-55182 Ferramenta simples de linha de comando para detectar e explorar a CVE-2025-55182 RCE em Componentes do Servidor React em aplicações Next.js. Instalação root@kitploit: chmod +x scanner.sh Uso root@kitploit: Escanear com comando padrão id ./scanner.sh -d example.com Executar...

ToolShellFinder

🛠️ ToolShellFinder: Rilevamento di CVE-2025-53770 & CVE-2025-53771 Uno script PowerShell 7+ ad alte prestazioni per scansionare i log IIS e rilevare segni di sfruttamento legati a ToolShell , che mira specificamente alle vulnerabilità zero-day CVE-2025-53770 e CVE-2025-53771 in Microsoft...

CVE-2026-82082

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-18983

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpuaactionprocessoptionupdate function. This is due to insufficient file type validation in wphandleupload called without a MIME...

CVE-2026-16759

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, and including, 4.0.5 via the tutorcoursefilterajax AJAX action. This is due to missing authorization on the handler...

gogs-CVE-2025-8110

Gogs CVE-2025-8110 PoC Este repositório contém uma Prova de Conceito PoC para o CVE-2025-8110, uma vulnerabilidade de Execução Remota de Código RCE no Gogs. O exploit tem como alvo a implementação do servidor SSH interno, permitindo que atacantes injetem comandos maliciosos por meio da configuraç...