CVE-2025-26326

CVE-2025-26326 Vulnerabilità di sicurezza critica negli add-on di connessione remota NVDA Remote e Tele NVDA Remote. Questa vulnerabilità è stata registrata come CVE-2025-26326 in CNA MITRE. Questa CVE/vulnerabilità è stata pubblicata nei seguenti database globali: NVD, National Institute of...

Qinglong-Combo-Exploit

🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

Exploit-CVE-2023-38646-Metabase

Exploit CVE-2023-38646 Metabase prima di 0.46.6.1 open source e prima di 1.46.6.1 Enterprise Exploit per la vulnerabilità di Esecuzione di Codice Remoto RCE identificata in Metabase versioni precedenti alla 0.46.6.1 open source e 1.46.6.1 Enterprise. La vulnerabilità consente agli attaccanti di...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Descrizione Questo script Python funge da strumento ausiliario per semplificare il processo di sfruttamento della vulnerabilità CVE-2022-46169. Avvia un server HTTP che rimane in ascolto delle richieste in arrivo e fornisce una semplice interfaccia per consentire...

EUVD-2026-65217

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....

ipmitest

ipmitest Shell-Skript zum Testen der IPMI Cipher Type Zero Authentifizierungsumgehungsschwachstelle CVE-2013-4784 IPMI ist eine standardisierte Computersystemschnittstelle, die von Systemadministratoren für das Out-of-Band-Management von Computersystemen und die Überwachung ihres Betriebs verwend...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

PT-2026-81350

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description The software contains two security flaws that allow unrestricted operating system command execution. First, the security configuration is disabled by default when the MCP SHELL SEC CONFIG FILE...

Gitea Code Injection Vulnerability

Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account...

PT-2026-81351

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS command injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist defined in security.yaml. However, the defaul...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote-Befehlsausführung CVE-2014-6287 🚨 Über den Exploit Dies ist ein Proof-of-Concept-Exploit für die bekannte Remote-Befehlsausführungsschwachstelle in Rejetto HttpFileServer HFS v2.3.x , identifiziert als CVE-2014-6287. Durch Missbrauch der anfälligen Suchfunkti...

Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Strumento di sfruttamento avanzato per Webmin CVE-2022-0824 - Supporta doppia modalità: esecuzione di comandi e reverse shell !IMPORTANT Uno strumento di sfruttamento avanzato per la vulnerabilità Webmin CVE-2022-0824, supporta due modalità:...

CVE-2026-48778

CVE-2026-48778 POC Notepad++ RCE tramite commandLineInterpreter in config.xml Utilizzo root@kitploit: .\CVE-2026-48778.exe calc.exe Dimostrazione https://github.com/user-attachments/assets/79ec82c9-ab37-4923-b62d-325710095e86 Riepilogo della vulnerabilità...

doublehop

Doublehop Dieses Tool soll dabei helfen, PowerShell Remoting / WinRM zu verwenden, um PowerShell-Befehle auf entfernten Hosts mithilfe der WinRM-Double-Hop-Technik auszuführen. Das Tool setzt voraus, dass Sie Zugriff auf das interne Netzwerk und die CLI haben. Nutzung root@kitploit: doublehop...

ChamiloLMS-CVE-2023-4220

Exploit ChamiloLMS CVE-2023-4220 Exploit Python per CVE-2023-4220 , una vulnerabilità di upload arbitrario di file non autenticato che interessa Chamilo LMS = 1.11.24. La vulnerabilità si trova nel componente BigUpload di Chamilo. Sulle installazioni vulnerabili, il gestore di upload permette di...

CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Exploit per Esecuzione Remota di Comandi CVE-2012-2982 Panoramica Questo repository contiene un Proof-of-Concept PoC per CVE-2012-2982 , una vulnerabilità di esecuzione remota di comandi autenticata che interessa Webmin versioni 1.590 e precedenti. La vulnerabilità risiede...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: إثبات المفهوم لاستغلال Apache ActiveMQ عن بُعد RCE الواجب: الواجب الثالث لمادة SSP الفريق: RCE You Later الأعضاء: Banica Horia Alexandru, Comarlau Vlad-Constantin رابط فيديو لاستخدام المستودع لعمل إثبات المفهوم: https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 نظرة عامة يحتوي هذا...

Gitea-Forgejo-CVE-2025-68937

Vulnerabilità di espansione arbitraria dei template in Gitea e Forgejo Quest'opera è distribuita con licenza Creative Commons Attribution-ShareAlike 4.0 International License. Sommario Durante l'analisi del codice sorgente di Forgejo e Gitea per comprendere meglio come viene eseguito il templatin...