exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector ist eine lokale Entwicklungsplattform für MCP-Server. In Version 1.4.2 und früher ermöglicht ein RCE-Fehler Angreifern, manipulierte HTTP-Anfragen zu senden, die einen MCP-Server installieren und Code remote ausführen, da der Dienst standardmäßig auf 0.0.0....

promptfoo v0.122.1

Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...

tapo-c260-rce

Catena RCE Tapo C260 CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept della catena di exploit per la telecamera IP TP-Link Tapo C260 che consente di ottenere RCE da non autenticato a root concatenando tre vulnerabilità scoperte da Eugene Lim Spaceraccoon. Crediti Tutta la ricerca e ...

enseal

enseal Condivisione sicura e effimera di segreti per sviluppatori. Smetti di incollare segreti su Slack. enseal rende il percorso sicuro più veloce di quello insicuro — condividi file .env e segreti attraverso canali crittografati e monouso con un solo comando e zero configurazione.bash sender $...

CVE-2026-39842

CVE-2026-39842: Iniezione di Espressioni in OpenRemote - RCE nel Rules Engine TL;DR Vulnerabilità critica di esecuzione remota di codice nel Rules Engine di OpenRemote che consente agli utenti autenticati con ruolo write:rules di eseguire codice arbitrario sul server con privilegi di root...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology RCE non autenticato tramite Endpoint di Debug dubboApi -critical TL;DR Weaver E-cology 10.0 precedente alla build 20260312 contiene una vulnerabilità critica di esecuzione remota di codice non autenticata nell'endpoint /papi/esearch/data/devops/dubboApi/debug/metho...

CVE-2025-1338

CVE-2025-1338 Questo repository contiene uno script proof-of-concept per l'exploit di CVE-2025-1338 1.Introduzione alla NUUO-Camera La NUUO camera è un videoregistratore di rete NVR prodotto dalla società NUUO nella provincia di Taiwan, in Cina. È ampiamente utilizzata in molti settori come vendi...

-CVE-2021-4034

-CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt " "Polkit precedentemente PolicyKit è un componente per il controllo dei privilegi a livello di sistema nei sistemi operativi simili a Unix. Fornisce un modo organizzato per i processi non privilegiati di comunicare con...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81573

CodeMeter Runtime versions before 8.41a or 9.10 are affected when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing arbitrary remote peers to execute commands intended only for local or same-network clients. This enables reading sensi...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

EUVD-2026-66980

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2025-41244-PoC

CVE-2025-41244 PoC VMware Aria Operations &1" VERSIONEND done Estratto da get-versions.sh righe 119-124: root@kitploit: getversion "/\S+/httpd-prefork|httpd|httpd2-prefork$|\s" -v getversion "/usr/bin|sbin/apache\S" -v getversion "/\S+/mysqld$|\s" -V getversion ".?/\Snginx$|\s" -v getversion...

Centreon-Exploits-2026

Exploit per CVE-2026-2749, CVE-2026-2751 e CVE-2026-2750 Questo repository contiene exploit per CVE-2026-2749, CVE-2026-2751 e CVE-2026-2750 in Centreon, che sfruttano vulnerabilità di Path Traversal, SQL Injection e Command Injection. Versioni Vulnerabili Tutte le versioni precedenti alla 25.10...

atril_cbt-inject-exploit

CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril CBT-Datei-Parsing-Argument-Injection-Remote-Code-Execution-Schwachstelle Eine kritische One-Click-RCE/Command-Injection-Schwachstelle, die gängige Linux-Betriebssysteme mit MATE-, Cinnamon- und einigen Xfce-Desktop-Umgebungen betrifft...

slippy-book-exploit

Slippy-book: EPUB-Dateiparsing – Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076 Atril Reserviert: RCE-Schwachstelle betrifft beliebte Linux-Distributionen, darunter Mint, Kali, Parrot, Manjaro usw. EPUB-Dateiparsing – Directory Traversal Remote Code Execution Ein...

mcpjaminspector-unauth-rce

mcpjaminspector-unauth-rce CVE-2026-23744 RCE in MCPJam inspector = 1.4.2 Details zur Schwachstelle https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 Verwendung root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help...

CVE-2026-23744-POC

Beschreibung Diese Schwachstelle besteht, weil MCPJam Inspector interne API-Endpunkte offenlegt, die für Debugging und Entwicklung gedacht sind. Diese Endpunkte akzeptieren benutzergesteuerte Eingaben und leiten sie ohne ordnungsgemäße Validierung oder Bereinigung direkt an die systemnahe...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

EUVD-2026-66491

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring packet limits On GFX rings, amdgpucsp2ib passed user-supplied ibbytes through to ib-lengthdw without a limit, while ringemitib encodes length into packet fields. Oversized values can...