CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authentifizierte Befehlseinschleusung im Configuration Wizard Einfaches Proof-of-Concept-Repository für CVE-2025-34227, eine authentifizierte Befehlseinschleusung in Nagios XI - Configuration Wizard Vollständiger Artikel hier:...

Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-

Webmin 1.580 RCE-Ausführungsanleitung Schnellreferenz für die Ausführung authentifizierter Remote-Code-Execution RCE auf Webmin 1.580 über die Komponente /file/show.cgi. 1. Angriffsmaschine Listener Führen Sie diesen Befehl auf Ihrem lokalen Rechner aus, um die eingehende Verbindung...

CVE-2021-31630

CVE-2021-31630 OpenPLC 3 WebServer Esecuzione Remota di Codice Autenticata. Descrizione La presenza di Command Injection nel webserver Open PLC v3 consente a remoti attaccanti di eseguire codice arbitrario. Testato solo sulla macchina HTB Wifinetictwo.htb. Ho riscontrato problemi con tutti gli...

CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 noto anche come BIAS Bluetooth Impersonation Attack Sembra che dopo un po' e superando qualche ostacolo sia riuscito a eseguire BIAS Bluetooth Impersonation Attack CVE 2020-10135. Ho impersonato la connessione di un Samsung S3 Neo+ verso un host Linux. Roba...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Questo è un programma Python3 che sfrutta la vulnerabilità RCE autenticata di GitLab nota come CVE-2022-2884. DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è destinato a ingegneri della sicurezza e personale appsec per valutazioni di sicurezza. Si prega di utilizzare...

proofpoint-CVE-2023-0089

Über Sicherheitsforscher: ly1g3, ly1g3attuta.io GPG-Fingerabdruck: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Überblick: Remote Code Execution – Von einem niedrig privilegierten authentifizierten Benutzer zu Admin-RCE CVE: CVE-2023-0089 Zeitleiste:...

packetfence-CVE-2024-39024

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Remote Code Execution - Da utente autenticato di basso livello a admin RCE CVE: CVE-2024-3924 Cronologia: Scoperto - ly1g3...

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent Dissert...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE und Eskalation von Domain-Admin-Rechten für Mailcow. Inklusive POC. Gemeldet und behoben: 2022-05 Gepatchte Version: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245:...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

RHSA-2026:59136 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:59135 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilità di Iniezione di Comandi in TP-Link Tapo C200 CVE-2021-4045 📌 Riepilogo CVE-2021-4045 è una vulnerabilità di iniezione di comandi scoperta nella fotocamera TP-Link Tapo C200 , che consente a un attaccante di prendere il controllo totale del dispositivo con privilegi...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Implementazione Python dell'exploit di esecuzione di codice in remoto per CVE-2019-6340, basata sull'analisi del modulo Metasploit e sul lavoro precedente di leonjza. Differenza chiave rispetto a EDB-46459: utilizza POST invece di GET, bypassando la...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...