CVE-2026-55182

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

cve-2023-5044

CVE-2023-5044 Ingress-Nginx-Exploit Proof-of-Concept Dies ist ein schnelles Go-Programm, um die aktuelle CVE im Ingress-Nginx-Controller auszunutzen. Details zur Durchführung sind bereits über Rory McCunes Blog unter https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/ verfügbar,...

CVE-2023-2255

Comando para executar a criação do exploit: sudo python3 starkelevate.py /home/bob/Downloads/librecommand.exe --output librecommand.odt apenas para fins educacionais...

CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS-Befehlseinschleusung PoC English version Übersicht Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-40176 , die im Perforce VCS-Treiber von Composer vorhanden ist. Die Schwachstelle betrifft...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC para a vulnerabilidade CVE-2024-24576 "BatBadBut" Informação Após executar o script, ele pedirá um argumento. O argumento será passado para o arquivo bat. Se você fechar o argumento com " e depois &, pode executar qualquer comando do Windows. Por exemplo:...

CVE-2025-32778

CVE-2025-32778 - Exploração de Injeção de Comandos no Web-Check Descrição CVE-2025-32778 é uma vulnerabilidade crítica de injeção de comandos na ferramenta OSINT Web-Check de Lissy93. Permite que atacantes não autenticados executem comandos arbitrários do sistema através do parâmetro url na API d...

struts-rce-cve-2017-9805

Beschreibung Apache-Struts-RCE-Tool für CVE 2017-9805 Optionen u: die Ziel-URL; c: der Befehl, der auf einem verwundbaren Ziel ausgeführt wird; f: prüft automatisch auf RCE mithilfe einer Liste von Zielen ein Ziel pro Zeile; p: gibt den Port für einen lokalen Listener an – wird mit der Option f...

CVE-2024-30167

Atlona OME प्रमाणित कमांड इंजेक्शन के लिए PoC अस्वीकरण : यह प्रूफ ऑफ कॉन्सेप्ट केवल शैक्षिक और अनुसंधान उद्देश्यों के लिए प्रदान किया गया है। इस कोड का उपयोग उन सिस्टमों पर न करें जिनके आप मालिक नहीं हैं या जिनके परीक्षण के लिए आपके पास स्पष्ट अनुमति नहीं है। मैं किसी भी दुरुपयोग के लिए जिम्मेदार...

SpotifyC2

SpotifyC2 — Ricerca su Canale di Comando Basato su Cloud Esegui comandi attraverso una playlist di Spotify e ricevi l'output dei comandi tramite Telegram. Cos'è SpotifyC2? SpotifyC2 è un progetto di ricerca sulla cybersecurity basato su Windows che dimostra come servizi cloud accessibili...

CVE-2018-1000533

ثغرة تنفيذ التعليمات البرمجية عن بُعد في GitList 0.6.0 CVE-2018-1000533 GitList هو عارض مستودعات Git حديث. في الإصدارات 0.6.0 وما دون من GitList، توجد ثغرة تتمثل في تمرير مدخلات لم يتم التحقق منها بشكل صحيح إلى دالة النظام، مما يسمح بتنفيذ أوامر عشوائية بصلاحيات مستخدم PHP. إعداد البيئة لتشغيل خا...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering هندسة عكسية ثابتة للبرامج الثابتة لثغرة CVE-2015-1187 في جهاز D-Link DIR-820L باستخدام Strings وGhidra وBinwalk. تم ذلك عن طريق استخراج نظام الملفات الجذري لمعمارية MIPS، وتحديد معالج الواجهة الخلفية ncc2، وتتبّع pingaddr عبر بناء الأوامر وصولًا...

THM-MagnusBilling-CVE-2023-30258-Exploit

THM-MagnusBilling-CVE-2023-30258 ممتاز! دعنا نحوّل كتابتك الكاملة إلى إنجليزية احترافية، جاهزة لمستودع GitHub. كما قمت بتحسينها من حيث الوضوح وسهولة القراءة — إنها مادة بمستوى يليق بالملف الشخصي. ⸻ 🛡️ MagnusBilling RCE → Root CVE-2023-30258 📌 نظرة عامة • الهدف: 10.145.148.203 • المنصة: TryHackMe •...

CVE-2025-69212

CVE-2025-69212: OpenSTAManager की P7M फ़ाइल प्रोसेसिंग में OS कमांड इंजेक्शन अवलोकन...

ZipRarHunter

ZipRarHunter ZipRarHunter è un potente strumento di hacking etico da riga di comando progettato per crackare le password di file di archivio ZIP e RAR utilizzando una wordlist. Automatizza il processo di recupero delle password da archivi crittografati. Caratteristiche Crack di file ZIP...

CVE-2026-48800-PoC

CVE-2026-48800 — PoC di esecuzione di codice arbitrario in Notepad++ Gravità: Alta | Versioni interessate: Notepad++ ≤ 8.9.6 | Correzione: v8.9.6.1 Uno script PoC per CVE-2026-48800, una vulnerabilità di esecuzione di codice arbitrario in Notepad++ ≤ 8.9.6 tramite shortcuts.xml. Per tutti i...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182

LibreNMS , a network monitoring system, is vulnerable to command injection in the Signal alert transport module (versions 21.6.0 through 26.5.0). The root cause lies in insufficiently escaped signal-cli path and Recipient field in the deliverAlert function of Signal.php, which are passed to unsaf...

CVE-2014-6271

CVE-2014-6271 Uso go run CVE-2014-6271.go www.example.com 80 whoami...

CVE-2014-6271

CVE-2014-6271 Shellshock Exploit in Python Un'implementazione Python pulita, efficiente e interattiva progettata per testare la vulnerabilità Shellshock CVE-2014-6271 tramite l'iniezione di variabili d'ambiente HTTP. 📝 Descrizione Shellshock CVE-2014-6271 è una vulnerabilità di sicurezza critica...