Offensive-lab-2

Laboratorio di sicurezza offensiva : ProFTPD 1.3.3c Backdoor Exploit Flag di root 1. Introduzione e obiettivi Questo report descrive il test di penetrazione eseguito su una macchina virtuale VM Linux vulnerabile, concentrandosi sull'identificazione di una vulnerabilità di servizio ad alto rischio...

CVE-2018-6574

CVE-2018-6574 Exploit für die Remote-Ausführung von Befehlen im Golang-Befehl go get. Einleitung Wenn Sie ein Paket mit go get abrufen, ist Go so konzipiert, dass es das Paket erstellt und installiert, ohne dabei Code daraus auszuführen. Die Idee ist, dass Sie Go-Pakete sicher abrufen, erstellen...

cve-2021-26084-confluence

Dies ist ein schneller und schmutziger poc, der für eine bestimmte Confluence-Instanz optimiert wurde, da keiner der vorhandenen handelsüblichen pocs funktioniert hat. Offensichtlich basiert es fast vollständig auf der Arbeit von https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md un...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Exploit proof-of-concept per la vulnerabilità Log4j CVE-2021-44228, nota anche come Log4Shell. Questo strumento genera una classe Java dannosa, avvia un server di riferimento LDAP e serve il payload su HTTP, consentendo a un attaccante remoto di eseguire comandi...

cve-2023-4220-poc

CVE-2023-4220 Chamilio Exploit PoC Schamlos kopiert von Direkt inspiriert von: https://starlabs.sg/advisories/23/23-4220/ Verwendung: root@kitploit: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help message an...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script che sfrutta la vulnerabilità che permette di stabilire un backdoor nel servizio UnrealIRCd con CVE-2010-2075 Utilizzo usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

CVE-2021-32157

..| XSS a RCE CRON|.. Descrizione : Sfruttare un attacco di Cross-Site Scripting XSS riflesso per ottenere un'esecuzione remota di comandi RCE tramite la funzione Scheduled Cron Jobs di Webmin Versione Testata : Webmin 1.973 ultima versione di GitHub 07/03/2021 Tipo di Attacco: Remoto Impatto :...

CVE-2021-32160

..| XSS para usuário privilegiado |.. Descrição : Explorando um ataque de Cross-Site Scripting XSS refletido para criar um usuário privilegiado por meio do recurso de adição de usuários do Webmin e, em seguida, obtendo um shell reverso por meio do recurso de processos em execução do Webmin Versão...

CVE-2026-57998

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 Apache Struts2 RCE Exploit 🛠️ Beschreibung Dies ist ein einfacher Python-basierter PoC für CVE-2017-5638 – eine Remote Code Execution-Schwachstelle in Apache Struts 2. ⚠️ Haftungsausschluss Dieser Code wird nur zu Bildungszwecken bereitgestellt. Verwenden Sie ihn NICHT...

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Segreto JWT hard-coded nel broker MQTT del mesh Cudy WR3000 2.0 Strumenti PoC per l'articolo Hunt-Benito "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

EUVD-2026-64261

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

CVE-2026-57998 better-npm-audit OS Command Injection via registry flag

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passes that string to childprocess.exec in index.ts, which...

CVE-2026-57998

better-npm-audit (npm package) through 3.11.0 and the 4.0.0-rc.2 prerelease is vulnerable to OS command injection via the --registry option. The user-supplied registry value is interpolated into a command string in src/handlers/handleInput.ts without validation or quoting, then passed to child_pr...

Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

MAL-2026-14358 Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Panoramica RCE critica pre-autenticazione in BeyondTrust Remote Support e Privileged Remote Access. Un attaccante remoto non autenticato può eseguire comandi del sistema operativo...

CVE-2026-53541

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...