kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

ds3-nrssr-rce

Update: Dark Souls III 1.15.1 A new game update, 1.15.1, has been released for Dark Souls III on 2022/08/25, along with the restoration of online services. This update fixed both CVE-2022-24125 and CVE-2022-24126 , along with a wide variety of other potential security vulnerabilities present in t...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 Vulnerabilidad de ejecución remota de código que ocurre en el modo CGI de PHP registrada en la detección de eventos de inyección de argumentos PHP-CGI CVE-2024-4577 desde IP externa hacia servidor interno. Cuando PHP se ejecuta en modo CGI en un entorno...

CVE-2019-19781

Este artículo trata sobre la ejecución remota de código RCE por Directory Traversal en Citrix ADC and Gateway, registrada como CVE-2019-19781. Esta vulnerabilidad de ejecución remota de código se produce porque no se valida adecuadamente el archivo smb.conf en ../vpns bajo la ruta /vpn. Permite...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Microsoft Windows SMBGhost Vulnerability Checker - CVE-2020-0796 - SMBv3-RCE The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotia...

study-CVE-2025-55182

Estudio de CVE-2025-55182 Repositorio para aprender sobre la vulnerabilidad de Remote Code Execution RCE en React Server Components. 🔴 Advertencia Úselo únicamente con fines educativos. Usarlo contra sistemas de terceros sin permiso es ilegal. 📋 Resumen de la vulnerabilidad...

CVE-2025-24893

CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: root@kitploit: $ nc -nvlp Then run the script: root@kitploit: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...

POC-CVE-2025-55182

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation root@kitploit: chmod +x scanner.sh Usage root@kitploit: Scan with default command id ./scanner.sh -d example.com Execute custom command...

CVE-2022-27925-Revshell

Zimbra Exploit de Ejecución Remota de Código No Autenticado CVE-2022-27925 root@kitploit: / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET,...

SSH-key-and-RCE-PoC-for-CVE-2021-41773

SSH Key and RCE PoC for CVE-2021-41773 This repository contains a Proof-of-Concept PoC for CVE-2021-41773. This CVE exposes a Local File Inclusion LFI and Remote Code Execution RCE vulnerability. Installation Ensure you have Go version 1.23.0 installed. Build the exploit binary with the following...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 es una grave vulnerabilidad de seguridad que afecta a Apache Tomcat, permitiendo a un atacante explotar configuraciones incorrectas o debilidades para ejecución remota de código RCE. Cuando se explota, esta vulnerabilidad puede llevar a la toma de control del servido...

tomcat-cluster-session-sync-exp

工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 tomcat cluster sync-session 利用exp 这是一个tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。 使用 先编译出jar包： root@kitploit: mvn clean compile assembly:assembly 生成jar包存在于target目录下 使用，例： root@kitploit: ja...

CVE-2025-3616

Metasploit Module: Greenshift WordPress Plugin Arbitrary File Upload CVE-2025-3616 This repository contains a Metasploit module to exploit CVE-2025-3616 , an arbitrary file upload vulnerability in the Greenshift WordPress plugin versions 11.4 through 11.4.5. The exploit allows authenticated users...

CVE-2025-55182

CVE-2025-55182 Autor original:https://github.com/msanft/CVE-2025-55182 Esta vulnerabilidad permite la ejecución remota de código RCE en las Server Functions de React, por ejemplo, las ofrecidas por Next.js a través de referencias inseguras al prototipo. No soy un experto en React o Next.js, así q...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

CVE-2025-2294

CVE-2025-2294 Introducción CVE-2025-2294 es una vulnerabilidad crítica de tipo Local File Inclusion LFI en el plugin Kubio AI Page Builder para WordPress. La vulnerabilidad permite a un atacante remoto no autenticado enviar un parámetro especialmente manipulado, lo que provoca que el plugin inclu...

CVE-2017-14105

Aerohive HiveManager Classic 权限提升漏洞 名称 Aerohive HiveManager Classic 权限提升漏洞 受影响系统 HiveManager Classic 8.0r1 8.1r1 严重程度 中等 6.6/10 影响 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C 供应商 http://www.aerohive.com/ 公告 http://www.ush.it/team/ush/hack-aerohive/aerohive-priv-exec.txt 作者 Sandro "guly"...