EUVD-2026-66381

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

CVE-2026-19042

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user. The attack is delivered through a specially crafted URL sent via the out-of-session chat feature, requ...

Security update for qemu

This update for qemu fixes the following issue: CVE-2026-3886: QEMU calcimagehostmem Integer Overflow Local Privilege Escalation Vulnerability bsc1268061. Changes for qemu: Bug fixes: target/s390x: Make container ids in SysIB15x 1-based bsc1275490 target/s390x: move @deprecated-props to...

Vulnerabilities in DrayTek VigorSwitch

DrayTek has addressed several vulnerabilities in the VigorSwitch product line. These vulnerabilities primarily involve command injection, buffer overflows, null pointer dereferencing, directory traversal, and insufficient authorization checks in various functions of the DrayTek VigorSwitch device...

Vulnerabilities found in DrayTek VigorAP

DrayTek has addressed several vulnerabilities in the VigorAP product line. These vulnerabilities exist in various functions and components of the DrayTek VigorAP devices, including tr069TestInform, ExportSettings, setLan, setcamset, meshstartspeedtest, InquierTime, apautotest, uploadsettings.cgi,...

EUVD-2026-66378

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77533

UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

CVE-2026-77533

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

POC-CVE-2025-55182

POC-CVE-2025-55182 credito : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 root@kitploit: usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Utilizzo root@kitploit: Single target exploit python3...

CVE-2025-61228

CVE-2025-61228 Avviso Questo problema sembra essere più grave di quanto suggerito dallo sviluppatore, quindi non voglio che questa parte venga dimenticata tra le righe. Lo sviluppatore ha osservato sul suo blog: Questo può accadere solo se un programma in esecuzione sul tuo sistema cerca SuperDup...

CVE-2011-2523

CVE-2011-2523 Ausnutzung 🚀 Verwendung Dieses POC-Skript ermöglicht es Ihnen, die CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution auszunutzen. Hilfe ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authentifizierter Remote-Code-Ausführungs-Exploit für NetLink-Router mittels boa-Server. CVSS-Bewertung: 7.2 Verwundbarkeitstypen: OS Command Injection Authentifizierung: Erforderlich Betroffenes Modell: HG323 Beschreibung Die Ressource /boaform/admin/formPing in...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection Ein Python-basierter Exploit für CVE-2022-30525 Zusammenfassung der Schwachstelle NIST Eine OS-Befehlseinschleusungsschwachstelle im CGI-Programm von Zyxel USG FLEX 100W Firmware-Versionen 5.00 bis einschließlich 5.21 Patch 1, USG FLEX 200...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Esegue la scansione delle istanze Kestra per il bypass del filtro di autenticazione endsWith"/configs". Il file AuthenticationFilter.java di Kestra controlla request.getPath.endsWith"/configs" invece di confrontare il percorso esatto /api/v1/configs...

CVE-2020-10567

POC-CVE-2020-10567 POC RCE - RESPONSIVE filemanager v.9.14.0. non il ramo principale ⚠️ Progetto GitHub : https://github.com/trippo/ResponsiveFilemanager Requisiti: Non è richiesto nulla, questo exploit non è autenticato. L'applicazione Responsive Filemanager è uno strumento di gestione file basat...

CVE-2023-46747

CVE-2023-46747 Uno script di sfruttamento sviluppato per sfruttare la CVE-2023-46747 che consente l'esecuzione remota di codice non autenticata Pre Auth RCE sui prodotti f5-BIG-IP. Questo script è inteso per sfruttare l'esecuzione remota di codice sui prodotti f5-BIG-IP vulnerabili. Installazione...

CVE-2025-29277

CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...

CVE-2020-5902

CVE-2020-5902 Nelle versioni BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 e 11.6.1-11.6.5.1, la Traffic Management User Interface TMUI, nota anche come utility di configurazione, presenta una vulnerabilità di esecuzione di codice in remoto RCE in pagine non divulgate...