CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, früher bekannt als NanoWBEM ist ein Open-Source-Verwaltungsserver für das Common Interface Model CMI von Microsoft und The Open Group. OMI ist ein Software-Agent, der auf den meisten Linux-VMs von Azure zu finden ist, doch viele...

CVE-2025-0108-Authentication-Bypass-checker

Questo strumento verifica se un dispositivo PAN-OS target è vulnerabile alla vulnerabilità di bypass dell'autenticazione CVE-2025-0108 . Invia una richiesta HTTP appositamente creata al target e analizza la risposta per determinare se il dispositivo è sfruttabile. Utilizzo singolo ip root@kitploi...

Project-CVE-2015-1635

CVE-2015-1635 CVE-2015-1635,MS15-034 Rilevamento della vulnerabilità root@kitploit: USAGE python MS15-034.py www.xxx.com:80 Programma di test Vulnerabilità di esecuzione codice remota in HTTP.sys CVE-2015-1635, MS15-034 La vulnerabilità di esecuzione codice remota esiste nello stack del protocoll...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Sfruttamento della vulnerabilità di esecuzione remota di codice CVE-2024-7954 Progetto di test di vulnerabilità del software Inviato da: Shivansh Kuntal Panoramica Questo progetto dimostra lo sfruttamento di CVE-2024-7954 , una vulnerabilità critica di esecuzione remota di codice RCE che colpisce...

RCE_CVE-2024-7954-

RCECVE-2024-7954- O plugin porteplume utilizado pelo SPIP antes das versões 4.30-alpha2, 4.2.13 e 4.1.16 é vulnerável a uma vulnerabilidade de execução arbitrária de código. Um atacante remoto e não autenticado pode executar PHP arbitrário como o usuário do SPIP ao enviar uma requisição HTTP...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept Im pki-core wurde ein Fehler gefunden. Der Zugriff auf externe Entitäten beim Parsen von XML-Dokumenten kann zu XML-External-Entity-Angriffen XXE führen. Dieser Fehler ermöglicht es einem entfernten Angreifer, möglicherweise den Inhalt beliebiger Dateien abzurufen,...

CVE-2026-21962

🚨 CVE-2026-21962 - Kritische Schwachstelle zur Umgehung der Authentifizierung 🧾 Zusammenfassung 🔥 Eine Schwachstelle mit maximaler Schwere 10.0 , die nicht authentifizierten Fernzugriff auf Oracle-Middleware-Systeme ermöglicht. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published ...

CVE-2020-5902-Vuln-Checker

Controllo Vulnerabilità CVE-2020-5902 Mentre esaminavamo la vulnerabilità con altri ricercatori, ci siamo resi conto che la maggior parte dei metodi attuali per testare la vulnerabilità può essere classificata come una forma di compromissione del sistema. Volevamo sviluppare un modo per testare l...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Un attaccante remoto può costruire una richiesta HTTP speciale per assumere il controllo della Console di WebLogic Server senza autenticazione. Installazione e utilizzo git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd...

EUVD-2026-51230

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

CVE-2026-41721

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request when Spring Data Web Support is enabled with a Controller method using @ProjectedPayload. This can cause the application to allocate excessive memory, leading to a...

PT-2026-54702

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description Insufficient validation of user-supplied input allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. This is achieved by sending a...

CVE-2025-36319 Vulnerabilities found in Watson Data Intelligence

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling...

nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers

A flaw was found in NGINX. When NGINX is configured to proxy HTTP/2 traffic using the ngxhttpproxyv2module or ngxhttpgrpcmodule with specific settings, a remote, unauthenticated attacker can send specially crafted large headers. This can trigger a heap-based buffer overflow, leading to a restart ...

CVE-2026-36821

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36796

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36792

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formWifiRadioSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36811

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...