CVE-2026-71912

Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...

EUVD-2026-64970

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64971

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-71911

Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...

CVE-2026-71908 DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test

Multiple DrayTek VigorAP models contain a command injection vulnerability in the meshstartspeedtest function. The vulnerability is caused by insufficient sanitization of the meshdeviceindex and meshdeviceip fields before command execution. A remote attacker can trigger this vulnerability via...

EUVD-2026-64965

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2023-27372

CVE-2023-27372 Die Sicherheitslücke besteht im Parameter oubli und ermöglicht es einem nicht authentifizierten Benutzer, beliebige Befehle mit den Rechten des Webserver-Benutzers auszuführen. Betroffen sind die Branches 3.2, 4.0, 4.1 und 4.2. Anfällige Versionen sind solche unter 3.2.18, unter...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP per CVE-2023-28434 MinIO non autorizzato a RCE Modificato da https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Cosa è stato cambiato? aggiungere cmd/x.go, usato per eseguire comandi di sistem...

CVE-2011-2523-poc

CVE-2011-2523-poc Questo è uno script Python3 per sfruttare la vulnerabilità CVE-2011-2523, l'Esecuzione di Comandi Backdoor di VSFTPD 2.3.4, utilizzando i moduli socket e telnetlib. Requisiti root@kitploit: sudo python3 -m pip install pwntools Installazione root@kitploit: git clone...

CVE-2025-24893-XWiki-RCE

📜 Descrizione Una vulnerabilità RCE critica esiste in XWiki che consente a attaccanti non autenticati di eseguire comandi arbitrari di sistema tramite endpoint API vulnerabili. Lo sfruttamento può comportare: Presa di controllo completa del server Furto o distruzione di dati Pivotaggio in reti...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc Questa vulnerabilità deriva da una sandbox incompleta in js2py, dove JavaScript appositamente predisposto può attraversare il modello di oggetti interno di Python e accedere a classi pericolose come subprocess.Popen, portando all'esecuzione arbitraria di...

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

EUVD-2026-64896

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

rejjeto_hfs-rce-exploit-cve-2014-6287

Exploit di Esecuzione Remota di Comandi su HFS CVE-2014-6287 Questa è una riscrittura in Python 3 del classico exploit di Esecuzione Remota di Comandi RCE che colpisce Rejetto HTTP File Server HFS v2.3.x , sfruttando la vulnerabilità identificata come CVE-2014-6287. Originariamente scoperto da...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Execução Remota de Código RCE Um problema foi identificado nas versões 1.0.0 e 1.1.4 do Telesquare TLR-2005Ksh que pode permitir que atacantes executem comandos arbitrários do sistema explorando o parâmetro Cmd. Essa vulnerabilidade pode potencialmente...

CVE-2026-68519

A flaw was found in Glances. This issue occurs because the --disable-config-exec option does not properly prevent on-alert action commands from executing shell operators. A local attacker with high privileges could exploit this to execute arbitrary commands, leading to high impact on...

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 und 1.7.x=1.7.2p4 Lokale Privilegienausweitung Sudo su „do“ erlaubt einem Systemadministrator, bestimmten Benutzern oder Benutzergruppen die Fähigkeit zu geben, einige oder alle Befehle als root auszuführen, während alle Befehle und Argumente protokolliert werden. Angreifbare...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 Questo repository contiene una spiegazione dettagliata e un PoC funzionante per Rejetto HTTP File Server HFS 2.3.x - Esecuzione remota di comandi. Configurazione: Crea un listener netcat. root@kitploit: nc -lnvp 1234 Cambia l'IP...

CVE-2025-63080

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...