nodejsshell

nodejsshell - h3x0v3rl0rd -...

GeckoDroid

GeckoDroid Client mobile per Adaptix C2 Framework. Accesso completo dell'operatore dal tuo dispositivo Android. Cosa fa GeckoDroid ti dà il controllo del tuo server Adaptix C2 da qualsiasi luogo. Invece di stare seduto al tuo client desktop, puoi gestire le operazioni in movimento. Agenti - Vedi...

omigod

CVE-2021-38647: Omigod Outro exploit para Omigod escrito rápido e sujo em Go. O exploit usa e é baseado em: a pesquisa da wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure o payload SOAP por midoxnet: https://github.com/midoxnet/CVE-2021-38647 a Prova de Conceito em Python...

CVE-2025-54068

CVE-2025-54068 Uma ferramenta projetada para explorar CVE-2025-54068 e Execução Remota de Comandos se a APPKEY do projeto Livewire for conhecida. Esta ferramenta é uma versão recodificada do projeto original da Synacktiv : Livepyre — https://github.com/synacktiv/Livepyre O conceito central e a...

WMImplant

WMImplant O WMImplant é uma ferramenta baseada em PowerShell que utiliza WMI tanto para executar ações em máquinas alvo quanto como canal C2 para emitir comandos e receber resultados. O WMImplant provavelmente exigirá permissões de administrador local na máquina alvo. Desenvolvido por @christrunc...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 यह रेपो hgrab-framework का हिस्सा है dork title: "Zimbra Web Client Sign In" प्रभावित उत्पाद Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 और पुराने Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 और पुराने स्थापना सर्वर पर ऐप स्थापित करें...

CVE-2026-48732-poc

CVE-2026-48732: Warp Remote SSH cwd कमांड इंजेक्शन PoC अंग्रेज़ी संस्करण सारांश यह रिपॉजिटरी, Warp के पारंपरिक SSH बैकग्राउंड कमांड प्रोसेसिंग में मौजूद, उच्च गंभीरता की OS कमांड इंजेक्शन भेद्यता CVE-2026-48732 का Proof of Concept PoC है। प्रभावित Warp संस्करणों में, SSH सत्र से रिपोर्ट की गई रिम...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260는 일부 Hikvision 제품의 웹 서버에서 발생하는 POC 명령 주입 취약점입니다. 불충분한 입력 검증으로 인해, 공격자는 악성 명령이 포함된 일부 메시지를 전송하여 명령 주입 공격을 실행할 수 있습니다. Exploit 제목: Hikvision 웹 서버 빌드 210702 - 명령 주입 Exploit 작성자: bashis -- shubtheone이 오류 업데이트 공급업체 홈페이지: https://www.hikvision.com/ 버전: 1.0 CVE: CVE-2021-362...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Nutzt DNSlog für die Überprüfung der Schwachstelle CVE-2021-26295. Verwendung des POC: Lege das Ziel in target.txt und führe python poc.py aus. JDK-Umgebung muss 12 sein, sonst kann ysoserial keinen gültigen Payload erzeugen EXP: python exp.py https://baidu.com...

CVE-2024-3400

Уязвимость CVE-2024-3400 Описание Уязвимость CVE-2024-3400 — это уязвимость безопасности, затрагивающая межсетевые экраны PAN-OS версий 10.2, 11.0 и 11.1. Данная уязвимость эксплуатируется, когда включены конфигурации шлюза GlobalProtect и телеметрии устройств. Злоумышленник может воспользоваться...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Профессиональный сканер RCE уязвимости CVE-2025-66478 для Next.js RSC 🎯 Обзор React2Shell Ultimate — это комплексный сканер уязвимости CVE-2025-66478, критической уязвимости удалённого выполнения кода RCE, затрагивающей приложения Next.js, использующие React Serv...

RLSA-2026:50773 Important: ruby4.0 security, bug fix, and enhancement update

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in...

ruby security, bug fix, and enhancement update

An update is available for ruby. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible, interpreted, object-oriented, scripting language. It has...

RLSA-2026:50778 Important: ruby security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command...

ruby4.0 security, bug fix, and enhancement update

An update is available for ruby4.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is the interpreted scripting language for quick and easy object-oriente...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 ist eine Sicherheitslücke in Cacti, einer Software zur Netzwerküberwachung und -verwaltung. Diese Schwachstelle ermöglicht es einem Angreifer, das System ohne Authentifizierung aus der Ferne auszunutzen, indem er eine speziell gestaltete HTTP-Anfrage sendet. Durch...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ root@kitploit: Clone...

ZeroPair

ZeroPair Zero-Authentication-Bluetooth-Exploit "Stiehl den Ausdruck, übernimm das System" root@kitploit: ███████╗███████╗██████╗ ██████╗ ╚══███╔╝██╔════╝██╔══██╗██╔═══██╗ ███╔╝ █████╗ ██████╔╝██║ ██║ ███╔╝ ██╔══╝ ██╔══██╗██║ ██║ ███████╗███████╗██║ ██║╚██████╔╝ ╚══════╝╚══════╝╚═╝ ╚═╝ ╚═════╝...

TimeAfterFree

TimeAfterFree PHP 8 Sandbox Escape PoC, der einen disablefunctions-Bypass auf Unix-ähnlichen Systemen demonstriert. Dieser Exploit nutzt einen Use-After-Free-Fehler, um disablefunctions zu umgehen und Systembefehle auszuführen. Die verwendeten Exploitation-Techniken zum Leaken von Heap-Pointern u...

ruby:3.3 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-pg, module.rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...