CVE-2026-39987-Poc

CVE-2026-39987-Poc Proof of Concept PoC WebSocket client for CVE-2026-39987 Marimo Pre-Auth RCE, intended for authorized security testing. ⚠️ Disclaimer This script/tool is provided for educational, research, and authorized testing purposes only. It is designed to be used on systems where you have...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC para la vulnerabilidad de deserialización en el protocolo Flight de React Server Components. ¿Qué es? Next.js 14+ y React 19 usan un protocolo propietario "Flight" para comunicarse entre cliente y servidor. El problema: el servidor carga cualquier módulo sin...

CVE-2022-31814

Download CVE-2022-31814 该脚本利用 pfSense 中的一个漏洞来上传一个 shell、执行命令，然后删除 shell。 要求 Python 3.x requests 库 安装 1. 克隆仓库或下载脚本。 2. 安装所需的 Python 库： root@kitploit: pip install requests 使用 root@kitploit: python pfsense.py -f -c -f, --file：包含 URL 列表的文件路径（每行一个）。 -c, --command：要在目标上执行的命令。 示例 root@kitploit: python...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Alerta de RCE sin autenticación previa 🚨 🧩 Resumen ID: CVE-2025-61757 Producto: Oracle Identity Manager Oracle Fusion Middleware Componente: REST WebServices Versiones afectadas: 12.2.1.4.0 y 14.1.2.1.0 Gravedad: 🔴 Crítico — 9.8 CVSS 3.1 Publicado: 21 de octubre de 2025 Tipo:...

CVE-2026-64824-PoC

CVE-2026-64824 — Path traversal por enlace simbólico en la copia de seguridad y restauración de Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Un atacante autenticado admin sube un tar de copia de seguridad manipulado. La ruta de restauración extrae el...

CVE-2026-15409

🚀 CVE-2026-15409 – RCE en Erlang en SonicWall SMA 1000 a través del proxy WebSocket Exploit de prueba de concepto para CVE-2026-15409 – ejecución remota de código no autenticada en los dispositivos de la serie SonicWall SMA 1000 a través del protocolo de distribución de Erlang tunelizado sobre...

CVE-2026-81944

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

CVE-2026-81945

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...

CVE-2026-81305

CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device...

CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-7006

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

CVE-2026-10858

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer underflow when processing multi-segment messages...

CVE-2026-11378

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in distribution list processing...

CVE-2026-10853

IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...

CVE-2026-11375

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers...

CVE-2026-10747

IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...

CVE-2026-10751

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

VulnHub-DC1-Writeup

VulnHub-DC1-Writeup "Writeups de laboratorio de pruebas de penetración que documentan cadenas de ataque completas — desde el reconocimiento hasta el root." 🔓 VulnHub — DC-1 Boot-to-Root Writeup Dificultad: Principiante–Intermedio Plataforma: VulnHub Objetivo: Capturar las 4 banderas y lograr un...

CVE-2026-3891

🚀 CVE-2026-3891 – Subida de Archivos no Autenticada con RCE en Pix for WooCommerce Exploit de prueba de concepto para CVE-2026-3891 – subida arbitraria de archivos no autenticada que conduce a la ejecución remota de código en el plugin de WordPress Pix for WooCommerce ≤ 1.5.0. 📖 Resumen...

CVE-2026-20841-PoC

No está claro si este es el método de activación correcto del PoC; por lo tanto, se proporciona solo como referencia. CVE-2026-20841 - Windows notepad.exe RCE Condición de explotación: Versión de Notepad 11.2510 paso 1. paso 2...