47411 matches found
tapodate
tapodate Usa https://github.com/hacefresko/CVE-2021-4045 exploit per impostare la data e altri comandi su una Tapo C200 offline...
CVE-2020-14882
CVE-2020-14882 Questo script consente l'esecuzione remota di codice RCE su Oracle WebLogic Server utilizzando una richiesta GET non autenticata. Sfrutta la vulnerabilità CVE-2020-14882. Eseguendo comandi arbitrari, un attaccante può ottenere accesso non autorizzato al server. Dettagli dell'exploi...
CVE-2026-63125
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can trick the daemon into writing to arbitrary host files via a symlink in backup.yaml, potentially leading to root-level command execution on the host. Mitigation No mitigation is needed as Incus is not...
CVE-2026-48769
A flaw was found in Incus, a container and virtual machine manager. A malicious image server can cause the Incus client to write files to arbitrary locations via a crafted response header, potentially leading to command execution as root. Mitigation No mitigation is needed as Incus is not shipped...
CVE-2026-48755
A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...
CVE-2026-48751
A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat produ...
CVE-2026-48750
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...
CVE-2026-48749
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...
CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...
CVE-2026-19042
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user. The attack is delivered through a specially crafted URL sent via the out-of-session chat feature, requ...
CVE-2025-49132-poc
CVE-2025-49132-poc Ho realizzato questo PoC per CVE-2025-49132, perché era interessante da sviluppare e fa parte di una challenge sulla mia piattaforma cyber deepreview ! Questa CVE sfrutta una vulnerabilità di inclusione di file che può essere escalata a esecuzione di codice remoto con lo script...
CVE-2011-2523
CVE-2011-2523 Ausnutzung 🚀 Verwendung Dieses POC-Skript ermöglicht es Ihnen, die CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution auszunutzen. Hilfe ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip...
CVE-2007-2447
Percorso ExploitDev 6 | CVE-2007-2447 | Samba 3.0.20 3.0.25rc 'Username' map script' Esecuzione di comandi Exploit originale: https://www.exploit-db.com/exploits/16320 Nome exploit: Samba username map script RCE CVE : 2007-2447 Laboratorio : Lame - HackTheBox Descrizione C'è una vulnerabilità nel...
Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
CVE-2020-35713
Descrizione I dispositivi Belkin LINKSYS RE6500 precedenti la versione 1.0.012.001 consentono ad attaccanti remoti di eseguire comandi arbitrari o impostare una nuova password tramite metacaratteri di shell nella pagina goform/setSysAdm. Come usare Passo 1: Modificare l'indirizzo IP nel file...
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 TerraMaster TOS RCE non autenticata tramite istanziazione di oggetti PHP Utilizzo Rilevamento della vulnerabilità. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Carica una webshell PHP. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:80...
FOG-Project
FOG-Project FOG Project CVE-2024-39914 Vulnerabilidade de execução de comandos...
CVE-2025-1974-PoC-exploit
CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================...
CVE-2019-2725
CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Befehlsausgabe 10.3.6 12.1.3 ResultBaseExec.java Wird zum Testen von defineClass verwendet, dekodiert die schadhafte Klasse aus Base64 und führt den Code aus. Hauptsächlich der Einfachheit halber kann verwendet werden oder nicht...