CVE-2025-32463_illdeed

CVE-2025-32463 — Exploit di elevazione dei privilegi di sudo -R variante illdeed Questo è un proof-of-concept PoC rifattorizzato per CVE-2025-32463, una vulnerabilità critica in sudo versioni 1.9.14 fino a 1.9.17 che consente l'elevazione locale dei privilegi a root tramite sudo -R e un modulo NS...

Security update for runc

This update for runc rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Enterprise Storage...

Security update for distribution

This update for distribution rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

Security update for buildah

This update for buildah rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

Security update for containerd

This update for containerd rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

CVE-2019-15107-Exploit

CVE-2019-15107 Exploit in Python Questo exploit è per CVE-2019-15107 Webmin 1.890-1.920 RCE senza autenticazione implementato in Python. Utilizzo root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

Node_CVE-2023-29017

CVE-2023-29017 | Esecuzione di codice remoto tramite vm2 Sandbox Escape WHS 4기 31반 - 김건우@gunwoo105 Riepilogo della vulnerabilità vm2 è una libreria sandbox Node.js per eseguire JavaScript non affidabile in un ambiente limitato. In condizioni normali, il codice all'interno della sandbox non dovreb...

Exploit for OS Command Injection in Totolink N600R_Firmware

CVE-2022-28906 PoC Python proof of concept for unauthenticate...

CVE-2026-50656-rogueplanet-validation

Rapporto di Convalida Proof of Concept RoguePlanet per Microsoft Defender Scopo e ambito del rapporto Questo rapporto riguarda la convalida del Proof of Concept RoguePlanet descritto pubblicamente e relativo a Microsoft Defender. La tecnica descritta è stata presentata dai media il 10 giugno 2026...

mcafee_atd_CVE-2019-3663

McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x und früher - Hartcodiertes Root-Passwort Sicherheitsbulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interessante Shadow-Einträge root@kitploit:...

ModSec-log4j2

Testen der ModSec-Regel Voraussetzungen Docker installiert haben Java auf Ihrem Rechner installiert haben Ausführen des Tests Das Repository klonen Führen Sie den folgenden Befehl aus, um den WAF ModSec und die verwundbare Anwendung zu starten root@kitploit: docker stack deploy -c...

CVE-2023-33538

Exploit in Python per la vulnerabilità di Command Injection su TP-Link TL-WR940N/TL-WR841N Istruzioni per l'uso 1. Verifica base della vulnerabilità : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Esecuzione di un comando personalizzato : root@kitploit: python...

CVE-2022-25064

CVE-2022-25064 Questo script sfrutta una vulnerabilità di OS Command Injection nel router TPLink WR840N, utilizzando la funzione configure del protocollo IPv6...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox ist eine fortschrittliche Bedrohungsschutzlösung, die isolierte Umgebungen schafft, um verdächtige Dateien, URLs und Netzwerkverkehr auf schädliches Verhalten zu analysieren...

CVE-2024-6330

CVE-2024-6330 GEO my WordPress = 4.5.0.1 - Inclusione di File Locale non autenticata Descrizione Il plugin GEO my WP per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 4.5.0.1 inclusa tramite il parametro 'forminfowindowtemplatecontentpath'. Ciò consente a...

MIPS-CVE-2014-9222

Dichiarazione di non responsabilità I tutorial sono solo a scopo informativo ed educativo. Credo che l'hacking etico, la sicurezza informatica e la cybersecurity dovrebbero essere argomenti familiari a chiunque utilizzi informazioni digitali e computer. Credo che sia impossibile difendersi dagli...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

OpenMRS Platform < 2.24.0 - Insecure Object Deserialization

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. id: CVE-2018-19276 info: name: OpenMRS Platform 2.24.0 - Insecure Object...

F5 BIG-IP iControl - REST Auth Bypass RCE

F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, may allow undisclosed requests to bypass iControl REST authentication. id: CVE-2022-1388 info: name: F5 BIG-IP...