CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool Un potente strumento di exploit per rilevare e sfruttare la vulnerabilità CVE-2025-55182 nei React Server Components di Next.js. Questo strumento consente l'esecuzione remota di comandi RCE nelle applicazioni Next.js vulnerabili, con funzionalità integrate di bypass WAF...

CVE-2025-8110-Gogs-Remote-Code-Execution

Software interessato: Gogs servizio Git self-hosted versioni precedenti alla 0.13.0. Tipo di vulnerabilità: Iniezione di comandi nel meccanismo dei Git hook. Descrizione: Un aggressore con accesso push a un repository può creare un Git hook dannoso che inietta comandi nello script dell'hook...

CVE-2025-7775-PoC

CVE-2025-7775 | NetScaler ADC RCE PoC root@kitploit: ⚠️ Disclaimer: questo è un PoC ipotetico solo per scopi didattici. Segmentare le reti NetScaler. CVE-2025-7775 non esiste. Utilizzare solo in un laboratorio isolato. Panoramica Exploit simulato per una RCE non autenticata e ipotetica in Citrix...

CVE-2026-38945

CVE-2026-38945 autore: Rafael José Núñez Gulías azienda: Iberian Var Group Prodotti interessati: RayVentory Scan Engine 12.6 Update 8 e versioni precedenti Advisory Raynet: RSEC200967 rvia in Raynet esegue un comando find con criteri di ricerca terminati in modo improprio per individuare le...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Nutzt DNSlog für die Überprüfung der Schwachstelle CVE-2021-26295. Verwendung des POC: Lege das Ziel in target.txt und führe python poc.py aus. JDK-Umgebung muss 12 sein, sonst kann ysoserial keinen gültigen Payload erzeugen EXP: python exp.py https://baidu.com...

CVE-2024-31317

CVE-2024-31317 서문 며칠 전 JD 공식 계정에서 CVE-2024-31317 취약점 분석 글을 봤는데, 전체적으로 읽어보니 꽤 흥미로웠습니다. 또한 차량용 인포테인먼트 시스템의 현재 주류 솔루션은 모두 Android이며 해당 취약점의 영향을 받는 범위 내에 있어 재현을 시작했습니다. 사용자 모드 권한 상승이므로 먼저 해당 사용자 권한을 획득해야 합니다. 따라서 차량 네트워크 환경에서는 일부 제한이 있습니다. 현재 주류 방법은 알 수 없는 서명의 APK 설치를 제한하고, 공학 모드 및 ADB에 직접 접근할 수 없도록 ...

CVE-2024-3400

Уязвимость CVE-2024-3400 Описание Уязвимость CVE-2024-3400 — это уязвимость безопасности, затрагивающая межсетевые экраны PAN-OS версий 10.2, 11.0 и 11.1. Данная уязвимость эксплуатируется, когда включены конфигурации шлюза GlobalProtect и телеметрии устройств. Злоумышленник может воспользоваться...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Профессиональный сканер RCE уязвимости CVE-2025-66478 для Next.js RSC 🎯 Обзор React2Shell Ultimate — это комплексный сканер уязвимости CVE-2025-66478, критической уязвимости удалённого выполнения кода RCE, затрагивающей приложения Next.js, использующие React Serv...

ruby security, bug fix, and enhancement update

An update is available for ruby. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible, interpreted, object-oriented, scripting language. It has...

RLSA-2026:50773 Important: ruby4.0 security, bug fix, and enhancement update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in...

RLSA-2026:50778 Important: ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command...

ruby4.0 security, bug fix, and enhancement update

An update is available for ruby4.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is the interpreted scripting language for quick and easy object-oriente...

CVE-2022-46649

CVE-2022-46649 PoC-Exploit für CVE-2022-46649, eine Befehlsinjektions-Schwachstelle im Endpunkt /cgi-bin/iplogging.cgi. Die Schwachstelle ermöglicht authentifizierten Angreifern die Ausführung beliebiger Betriebssystembefehle über manipulierte tcpdumpParams. Übersicht Schwachstelle: OS Command...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 ist eine Sicherheitslücke in Cacti, einer Software zur Netzwerküberwachung und -verwaltung. Diese Schwachstelle ermöglicht es einem Angreifer, das System ohne Authentifizierung aus der Ferne auszunutzen, indem er eine speziell gestaltete HTTP-Anfrage sendet. Durch...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ root@kitploit: Clone...

CVE-2025-49619

CVE-2025-49619 PoC Этот скрипт эксплуатирует CVE-2025-49619 в Skyvern для выполнения команды обратной оболочки. Автор Имя: Cristian Branet GitHub: cristibtz Использование 1. Запустите слушатель root@kitploit: nc -lvnp 2. Запустите эксплойт root@kitploit: python3 exploit.py -u "http://:" -k "" -i...

CVE-2024-57376

CVE-2024-57376 D-Link DSR-250 및 DSR-250N에 대한 인증 전 원격 코드 실행 익스플로잇 보안 권고: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 사용법 root@kitploit: $ python3 exploit.py usage: 예제 root@kitploit: $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250N year :...

CVE-2023-26039

CVE-2023-26039 Описание ZoneMinder — это бесплатное приложение с открытым исходным кодом для систем замкнутого телевидения CCTV на Linux, поддерживающее IP-, USB- и аналоговые камеры. Версии до 1.36.33 и 1.37.33 содержат OS Command Injection через daemonControl в...

CVE-202122986-EXP

F5 BIG-IP 远程命令执行漏洞（CVE-2021-22986） Impact de la vulnérabilité F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host:...

CVE-2019-5392-for-Python3

Version compatible Python3 pour CVE 2019-5392. Vous n'avez pas besoin d'installer python2.7. Exécutez-le sur votre terminal avec python3 installé. USAGE: cve.py python3 cve.py 2810 "C:\Windows\Temp"...