CVE-2026-39987-POC

CVE-2026-39987 - Marimo 0.23.0 प्री-प्रमाणीकरण RCE वेबसॉकेट Marimo के 0.23.0 से पहले के संस्करणों में एक गंभीर प्री-प्रमाणीकरण रिमोट कोड निष्पादन RCE कमजोरी के लिए प्रूफ ऑफ कॉन्सेप्ट PoC एक्सप्लॉइट। यह कमजोरी एक अप्रमाणित हमलावर को वेबसॉकेट एंडपॉइंट /terminal/ws से जुड़ने और लक्ष्य सर्वर पर मनमान...

HTB_Nibbles

HTBNibbles In questo repository troverai il report tecnico di Nibbles, l'exploit pwned.py per abusare della CVE-2015-6967 e uno strumento autopwn autopwn.py nel caso tu voglia risolvere la macchina in HackTheBox. Strumento Pwned.py: Questo file ti aiuterà a sfruttare la CVE-2015-6967. Se vuoi...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 é um framework de administração remota e C2 criptografado projetado exclusivamente para uso educacional, pesquisa de segurança e ambientes laboratoriais controlados. O projeto demonstra como construir um servidor de comando e controle personalizado com...

CVE-2025-63080

KAON PG5298A and PG5298B routers contain an insufficient access control flaw in their JSON-RPC interface . An authenticated user on the adjacent network can send crafted JSON-RPC requests to perform operations that are otherwise restricted to the GUI, enabling system file read or command executio...

EUVD-2025-210761

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2025-63080 Authenticated RCE in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 Ferramenta de Exploração de Execução Remota de Comandos 📖 Descrição da Vulnerabilidade Existe uma vulnerabilidade de execução remota de comandos no Apache Axis1.4 CVE-2019-0227. Quando a propriedade enableRemoteAdmin está definida como true, um atacante pode implantar um...

CVE-2026-34048

CVE-2026-34048 Le route di bootstrap del terminale riservate agli amministratori controllavano solo lo stato di login, permettendo a un normale membro del team di utilizzare il backend del terminale in tempo reale di Coolify ed eseguire comandi sui server del team. Introduzione Ho trovato questo...

cybersecurity-struts2

Vulnerabilità di Apache Struts2 | CVE-2017-5638 | Versione 2.5 Esclusione di responsabilità Questo materiale è inteso esclusivamente a scopo educativo e di ricerca. Non autorizzo né approvo alcun uso illegale o non etico dei contenuti o delle informazioni di questo progetto. Istruzioni Per esegui...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Verwendung root@kitploit: python3 CVE-2025-63406.py -u -...

CVE-2026-78306 DJI Drone Bluetooth Interface Unauthenticated DUML Command Execution

DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a...

QuickResponseC2

Capacità - Utilizzo - Dimostrazione - Panoramica del flusso di lavoro - TODO QuickResponseC2 QuickResponseC2 è un framework di Comando e Controllo C2 furtivo che permette una comunicazione indiretta e nascosta tra la macchina dell'attaccante e quella della vittima tramite un server HTTP/S...

cve-2025-66478_rce_vulnerable

Blog Moderno com shadcn/ui Um blog moderno e elegante construído com Next.js 16, React 19, shadcn/ui e Tailwind CSS. IMPORTANTE: Projeto de Next JS VULNERÁVEL criado apenas para fins educativos, de testes e exploração, NÃO SE RECOMENDA INSTALAÇÃO EM PRODUÇÃO, APENAS PARA ÂMBITO LOCAL OU AMBIENTE...

Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. id: CVE-2019-2725 info: name: Oracle WebLogic...

Oracle WebLogic Server - Remote Command Execution

Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised machine without entering necessary credentials. See...

Oracle Weblogic Server - Remote Command Execution

Oracle WebLogic Server contains an easily exploitable remote command execution vulnerability which allows unauthenticated attackers with network access via HTTP to compromise the server. id: CVE-2020-14882 info: name: Oracle Weblogic Server - Remote Command Execution author: dwisiswant0 severity:...

CVE-2026-47668

CVE-2026-47668 Nicht authentifizierte RCE in DBGate = 7.1.8 REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py Minimale Implementierung von RCE auf /runners/start, Privilegiert Wenn der Prozess in den Ordner...

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

CVE-2019-17558_Solr_Vul_Tool

Strumento di rilevamento della vulnerabilità di injection nei template Velocity di Solr Introduzione allo strumento Alla fine di ottobre 2019 è stata scoperta la vulnerabilità di esecuzione remota di comandi tramite injection nei template Velocity di Solr. Il rilevamento manuale di questa...

EUVD-2026-64730

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...