CVE-2025-57819-POC

CVE-2025-57819 — SQL-инъекция в FreePBX → RCE PoC CVE-2025-57819 — это критическая уязвимость SQL-инъекции в FreePBX, которая позволяет неаутентифицированному злоумышленнику добиться удалённого выполнения кода путём объединения SQL-инъекции с инъекцией cron-задач. ⚠️ Отказ от ответственности : Это...

CVE-2022-39952

CVE-2022-39952 PoC для CVE-2022-39952, затрагивающей Fortinet FortiNAC Конфигурация по умолчанию данного эксплойта создает задачу cron для организации обратной оболочки. Обязательно измените файл payload под ваше окружение. Технический анализ Технический анализ первопричины уязвимости и индикатор...

CVE-2026-20217

ZendTo 6.15-8 / reproduction de la RCE ClamAV à profil exact et de la variante root Ce répertoire est un ensemble autonome de reproduction en laboratoire autorisé pour la chaîne d'exécution de code ZendTo-vers-ClamAV sans compte et sa continuation séparée Smarty/cron root basée sur le profil par...

redis-exploitation

redis-exploitation CONFIG SET À des fins éducatives uniquement Construction root@kitploit: $ docker build -t victim . Exécution root@kitploit: $ docker run -d --name victim victim Attaque root@kitploit: $ docker exec -it victim bash root@kitploit: root@34ea33cb2eb2 / ls /var/spool/cron/...

poc_monitor

pocmonitor Un petit scraper qui cherche un POC de CVE-2024-49112 La configuration d'une tâche cron pour exécuter le script toutes les 4 heures permettra de conserver les mises à jour. L'alerte peut être personnalisée, mais un webhook Discord a été utilisé pour alerter un canal Discord. 0 /4 cd...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX SQLi pré-authentification vers RCE Un exploit tout-en-un pour CVE-2025-57819 , une injection SQL non authentifiée dans le module endpoint de FreePBX menant à une exécution de code à distance via injection de tâches cron. CVSS : 9.8 Critique —...

cve-2025-57819-exploit

Exploit CVE-2025-57819 Métadonnées Sévérité : Critique 9.8 Vecteur : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type : Injection SQL non authentifiée → Exécution de code à distance Logiciels concernés : FreePBX module endpoint 15.0.66, 16.0.89 et 17.0.3 Testé sur : FreePBX 16.0.40.7 sur CentOS ...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX: From Unauthenticated SQL Injection to Root Shell...

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 CVSS score: 9.8, a directory-traversal vulnerability in the VMware vCenter server that a...

CVE-2026-72607 Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...

PT-2026-70153

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = items batchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...

CVE-2026-72590 alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter

An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...

Redis-RCE-x-HTB

Redis RCE Toolkit Educational / Authorized Lab Use Only...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-5...

CVE-2026-50130

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to 6.4.2, a user with code execution as the unprivileged pihole user can escalate to root by replacing /etc/pihole/logrotate. The replacement is laundered to root:root...

GHSA-XRCF-6JH3-GGVX Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode

Summary Anyquery's server mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the ATTACH DATABASE command to write arbitrary SQLite databases to any path on the victim's filesystem where the...

PT-2026-60080

Name of the Vulnerable Software and Affected Versions Anyquery affected versions not specified Description When running in server mode, the software fails to restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the...

MAL-2026-10191 Malicious code in data-harvester (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c2e2c21d9afac9277d95589962d33a09651a5b6ef7e0b3c9e07aee56af213f On first import, dataharvester/init.py decodes a base64-embedded 486KB Linux ELF, writes it to /.config/.npm-cache/snapd-network, sets mode 0777, and...

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Summary Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow into this string without adequate sanitization: - event.headers keys — interpolated verbatim insi...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via improper handling of user-supplied input in the generateCronTriggerCronJobSpec process. An attacker can execute arbitrary shell commands with root privileges in the CronJob pod by injecting malicious content into...