CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-79992

CVE-2026-79992 affects Emacs TRAMP , where a local attacker can achieve arbitrary code execution by processing maliciously crafted filenames. The root cause is that TRAMP concatenates login arguments (derived from the user field) without proper sanitization before passing them to a local shell . ...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Vulnerabilidade de Execução Remota de Código CVE-2016-5734 Configuração root@kitploit: git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 Exploração root@kitploit: python3...

cve-2019-5736-exp

cve-2019-5736-exp Questo è un proof-of-concept PoC di exploit per la vulnerabilità CVE-2019-5736 in runc, il runtime utilizzato in Docker. Dichiarazione di non responsabilità Ho intrapreso questo progetto come esercizio, per ragioni educative e per divertimento. Dovrebbe essere scontato che non...

CVE-2023-32315

CVE-2023-32315 Openfire Console Authentifizierungs-Bypass-Schwachstelle mit RCE Plugin Einrichtung root@kitploit: git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Verwendung root@kitploit: python3 CVE-2023-32315.py -t http://127.0.0.1:9090...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution cve-2021-42013.py è uno script Python che aiuta a trovare la vulnerabilità Path Traversal o Remote Code Execution in Apache 2.4.50. Viene fornita un'istanza vulnerabile di Docker per mettere le mani su CVE-2021-42013 Se CGI-BIN è abilitato,...

citrix_dir_traversal_rce

citrixdirtraversalrce Una directory traversal è stata scoperta in Citrix Application Delivery Controller ADC, noto anche come NetScaler, e Gateway 10.5, 11.1, 12.0, 12.1 e 13.0. Quando l'NSPPE riceve una richiesta per GET /vpn/index.html, dovrebbe inviarla ad Apache, che la elabora. Tuttavia,...

flareon2024

Soluções do Flare-On 11 Códigos-fonte das minhas soluções para o desafio Flare-On11. Meus writeups de tarefas selecionadas disponíveis aqui...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...

CVE-2024-44193

Windows über iTunes hacken – Lokale Privilegienausweitung 0-Day Einführung zu CVE-2024–44193 Dies ist ein Write-up über CVE-2024–44193, einen Local Privilege Escalation Exploit in iTunes Version 12.13.2.3. Es wurde am 12. September 2024 von Apple gepatcht. Link zum Apple Security Advisory: Apple...

CVE-2020-0674-Exploit

CVE-2020-0674 CVE-2020-0674 é uma vulnerabilidade de use-after-free no mecanismo jscript legado. Pode ser acionada no Internet Explorer. O exploit aqui foi escrito por maxpl0it, mas a vulnerabilidade em si foi descoberta pela Qihoo 360 sendo usada na natureza. Este exploit simplesmente abre a...

CVE-2026-64204 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64204

NI LabVIEW contains an out-of-bounds write vulnerability triggered when loading a specially crafted VI (Virtual Instrument). This memory corruption can lead to information disclosure or arbitrary code execution . Affected versions are NI LabVIEW 2026 Q3 (26.3.0) and prior . Exploitation requires ...

EUVD-2026-65594

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell Analisi tecnica e matrice di mitigazione difensiva per il vettore CVE-2026-64638 XSS2Shell, un'inconsistenza critica nel parsing della schermata di autenticazione di WordPress Core che consente di concatenare un Cross-Site Scripting XSS riflesso pre-autenticazione con...

EUVD-2026-65592

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64203 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64203

CVE-2026-64203 is a memory corruption vulnerability (specifically an out-of-bounds read ) in NI LabVIEW triggered when loading a VI. Successful exploitation requires an attacker to get a user to open a specially crafted VI , which may lead to information disclosure or arbitrary code execution . T...

UltraRealy_with_CVE-2019-1040

UltraRelay aggiornato da Lazaar Sami per l'exploit CVE-2019-1040 UltraRelay è uno strumento per l'avvelenamento LLMNR e il relay delle credenziali NTLM. Si basa su Responder e impack. Ho aggiornato la versione originale https://github.com/5alt/ultrarelay per l'exploit CVE-2019-1040. Dirk-jan...