CVE-2022-21907

CVE-2022-21907 Descrizione - POC per CVE-2022-21907: vulnerabilità di esecuzione remota di codice nello stack di protocollo HTTP. - creato da antx il 2022-01-17. Dettagli - Vulnerabilità di esecuzione remota di codice nello stack di protocollo HTTP. - Simile a...

CVE-2024-48887-Exploit

CVE-2024-48887-Cambio di Password non Verificato CWE-620 Panoramica Una vulnerabilità di cambio password non verificato nell'interfaccia GUI di Fortinet FortiSwitch che consente a un attaccante remoto non autenticato di modificare le password degli amministratori tramite una richiesta appositamen...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – FreePBX Unauthentifizierte SQL-Injection zu RCE PoC Dieses Repository enthält zwei Python-Proof-of-Concept-Skripte PoC, die sich gegen CVE-2025-57819 richten, eine kritische unauthentifizierte SQL-Injection-Schwachstelle in FreePBX. 🧠 Über die Schwachstelle CVE-2025-57819...

Cve-2024-38063

CVE-2024-38063 Descrizione Questa repository contiene dettagli e potenziale codice di exploit per CVE-2024-38063, una vulnerabilità critica di Remote Code Execution RCE nel TCP/IP di Windows. La vulnerabilità consente a un attaccante non autenticato di eseguire codice arbitrario sul sistema targe...

CVE-2020-5902-F5BigIP

CVE-2020-5902 dispositivi F5 BIG-IP Riepilogo: Un pacchetto di rilevamento Zeek per CVE-2020-5902, una vulnerabilità CVE10.0 che colpisce i dispositivi F5 Networks BIG-IP. Riferimenti: https://corelight.blog/2020/07/28/zeek-in-its-sweet-spot-detecting-f5s-big-ip-cve10-cve-2020-5902/...

CVE-2024-4577

🚀 CVE-2024-4577: Scanner ed Exploit per l'Iniezione di Argomenti CGI in PHP 🛡️ Panoramica CVE-2024-4577 è una vulnerabilità critica che colpisce le applicazioni PHP che utilizzano la Common Gateway Interface CGI. Questo strumento funge sia da scanner che da exploit , consentendo ai professionisti...

CVE-2024-27198-SOC-Lab

CVE-2024-27198 — Lab SOC di Rilevamento e Risposta agli Incidenti Bypass dell'autenticazione in JetBrains TeamCity | Punteggio CVSS: 9.8 Critico Questo progetto costruisce un ambiente SOC Lab completo per simulare, rilevare e rispondere a CVE-2024-27198 — una vulnerabilità di bypass...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Penetration Testing Report Vulnerabilità di Bypass 2FA nel Plugin Really Simple SSL 📋 Indice Sintesi Esecutiva Informazioni sul Target Metodologia Cronologia Fase di Ricognizione Analisi della Vulnerabilità Flusso dell'Attacco Sfruttamento Valutazione dell'Impatto Rimedi...

CVE-2022-42889-RCE

CVE-2022-42889-PoC Prova di concetto per l'exploit di esecuzione remota di codice CVE-2022-42889 Vulnerabilità Text4Shell. Lascia una ⭐ per supporto ❤️ Informazioni su questa vulnerabilità CVE-2022-42889 è una nuova vulnerabilità critica simile a Spring4Shell e Log4Shell. È una vulnerabilità RCE...

YMC Filter - SQL Injection

YMC Filter = 3.11.5 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-54836 info: name: YMC Filter - SQL Injection author: theamanrawat severity: critical...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

Roundcube Webmail - Command Injection

Roundcube Webmail before 1.4.4 contains a command injection caused by shell metacharacters in configuration settings for imconvertpath or imidentifypath, letting attackers execute arbitrary code, exploit requires attacker to control configuration settings. id: CVE-2020-12641 info: name: Roundcube...

CentOS Web Panel - OS Command Injection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. id: CVE-2021-31324 info: name: CentOS Web Panel - OS Command Injection author: ritikchaddha severity: critical description: | The unprivileged user portal...

Roxy-WI - Remote Code Execution

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the delcert parameter without proper input validation in the /app/options.py file, allowing attackers to inject arbitrary OS commands. id: CVE-2022-31161 info: name: Roxy-WI - Remote Code...

kkFileView 4.0 - Server-Side Request Forgery

kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...

FreePBX - Remote Code Execution

FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option

The WP GDPR Compliance plugin allows unauthenticated users to execute any action and update any database value. This vulnerability is due to the lack of proper validation in the Includes/Ajax.php file. id: CVE-2018-19207 info: name: WP GDPR Compliance 1.4.3 - Unauthenticated Call Any Action or...

ThinVNC - Authentication Bypass

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution. id: CVE-2022-25226 info: name: ThinVNC - Authentication Bypass author: ritikchaddha severity: critical description: |...