Lucene search
+L

47326 matches found

CVE
CVE
added 2026/08/24 5:07 p.m.11 views

CVE-2026-71912

Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...

8.6CVSS6AI score0.00478EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.8 views

EUVD-2026-64970

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

8.6CVSS6.2AI score0.00478EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.8 views

EUVD-2026-64971

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

8.6CVSS6.2AI score0.00478EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.29 views

CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

8.6CVSS0.00478EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 5:07 p.m.11 views

CVE-2026-71911

Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...

8.6CVSS6AI score0.00478EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.33 views

CVE-2026-71908 DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test

Multiple DrayTek VigorAP models contain a command injection vulnerability in the meshstartspeedtest function. The vulnerability is caused by insufficient sanitization of the meshdeviceindex and meshdeviceip fields before command execution. A remote attacker can trigger this vulnerability via...

8.6CVSS0.03054EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.7 views

EUVD-2026-64965

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS6.2AI score0.03054EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 4:51 p.m.2 views

CVE-2023-27372

CVE-2023-27372 Die Sicherheitslücke besteht im Parameter oubli und ermöglicht es einem nicht authentifizierten Benutzer, beliebige Befehle mit den Rechten des Webserver-Benutzers auszuführen. Betroffen sind die Branches 3.2, 4.0, 4.1 und 4.2. Anfällige Versionen sind solche unter 3.2.18, unter...

9.8CVSS8.6AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/24 4:11 p.m.2 views

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP per CVE-2023-28434 MinIO non autorizzato a RCE Modificato da https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Cosa è stato cambiato? aggiungere cmd/x.go, usato per eseguire comandi di sistem...

8.8CVSS8.1AI score0.83957EPSS
SaveExploits14References2
Kitploit
Kitploit
added 2026/08/24 2:43 p.m.3 views

CVE-2011-2523-poc

CVE-2011-2523-poc Questo è uno script Python3 per sfruttare la vulnerabilità CVE-2011-2523, l'Esecuzione di Comandi Backdoor di VSFTPD 2.3.4, utilizzando i moduli socket e telnetlib. Requisiti root@kitploit: sudo python3 -m pip install pwntools Installazione root@kitploit: git clone...

10CVSS8.3AI score0.96184EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/24 2:39 p.m.1 views

CVE-2025-24893-XWiki-RCE

📜 Descrizione Una vulnerabilità RCE critica esiste in XWiki che consente a attaccanti non autenticati di eseguire comandi arbitrari di sistema tramite endpoint API vulnerabili. Lo sfruttamento può comportare: Presa di controllo completa del server Furto o distruzione di dati Pivotaggio in reti...

9.8CVSS0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/08/24 2:21 p.m.1 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc Questa vulnerabilità deriva da una sandbox incompleta in js2py, dove JavaScript appositamente predisposto può attraversare il modello di oggetti interno di Python e accedere a classi pericolose come subprocess.Popen, portando all'esecuzione arbitraria di...

5.3CVSS0.04548EPSS
SaveExploits22
RedhatCVE
RedhatCVE
added 2026/08/24 2:20 p.m.9 views

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

5.1CVSS5.9AI score0.00323EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 2:17 p.m.9 views

EUVD-2026-64896

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

7.5CVSS5.5AI score0.0013EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 2:07 p.m.2 views

rejjeto_hfs-rce-exploit-cve-2014-6287

Exploit di Esecuzione Remota di Comandi su HFS CVE-2014-6287 Questa è una riscrittura in Python 3 del classico exploit di Esecuzione Remota di Comandi RCE che colpisce Rejetto HTTP File Server HFS v2.3.x , sfruttando la vulnerabilità identificata come CVE-2014-6287. Originariamente scoperto da...

10CVSS0.99323EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/24 1:38 p.m.1 views

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Execução Remota de Código RCE Um problema foi identificado nas versões 1.0.0 e 1.1.4 do Telesquare TLR-2005Ksh que pode permitir que atacantes executem comandos arbitrários do sistema explorando o parâmetro Cmd. Essa vulnerabilidade pode potencialmente...

8.8CVSS0.06294EPSS
SaveExploits8
RedhatCVE
RedhatCVE
added 2026/08/24 1:29 p.m.7 views

CVE-2026-68519

A flaw was found in Glances. This issue occurs because the --disable-config-exec option does not properly prevent on-alert action commands from executing shell operators. A local attacker with high privileges could exploit this to execute arbitrary commands, leading to high impact on...

7.1CVSS6AI score0.00125EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 12:55 p.m.2 views

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 und 1.7.x=1.7.2p4 Lokale Privilegienausweitung Sudo su „do“ erlaubt einem Systemadministrator, bestimmten Benutzern oder Benutzergruppen die Fähigkeit zu geben, einige oder alle Befehle als root auszuführen, während alle Befehle und Argumente protokolliert werden. Angreifbare...

6.9CVSS0.01125EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/24 12:26 p.m.2 views

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Questo repository contiene una spiegazione dettagliata e un PoC funzionante per Rejetto HTTP File Server HFS 2.3.x - Esecuzione remota di comandi. Configurazione: Crea un listener netcat. root@kitploit: nc -lnvp 1234 Cambia l'IP...

10CVSS0.99323EPSS
SaveExploits23
NVD
NVD
added 2026/08/24 12:16 p.m.9 views

CVE-2025-63080

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

8.5CVSS0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder