CVE-2023-47129

CVE-2023-47129 - Statamic CMS Versionen 4.33.0 - Remote Code Execution Beschreibung In Versionen 4.33.0 von Statamic CMS, bei denen das Frontend ein Formular mit aktivem Datei-Upload enthält, ist es möglich, PHP-Dateien zu senden, die so erstellt wurden, dass sie wie Bilder aussehen, unabhängig v...

Powshell-decode-payload

PowerShell-Gzip-Code dekodieren sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd root@kitploit: sal a New-Object;a IO.StreamReadera...

hello-ReGrade-security

hello-ReGrade-security Una demo pratica di scoperta di zero-day conReGrade. Punterai una normale suite di test su ReGrade, la registrerai contro un piccolo servizio, la riprodurrai contro una seconda copia dello stesso servizio , e userai Claude Code + gli strumenti MCP di ReGrade per far emerger...

ColdFusion_EXp

أداة استغلال CVE-2023-29298/CVE-2023-26360 لرد الاتصال Reverse Shell مقدمة مبدأ الثغرة هو أن البيانات التي نبنيها في طلبات عميل CFML تُحفظ في coldfusion-out.log على الخادم؛ هذا الدليل يسجّل معلومات أخطاء الطلبات، وملف coldfusion-out.log يحتوي على الكود الذي نكتبه، ثم نستخدم classname لقراءة وتنفي...

CVE-2023-30547

CVE-2023-30547 Schwachstellenbeschreibung vm2 ist eine Sandbox, die nicht vertrauenswürdigen Code mit whitelisted Node.js eingebauten Modulen ausführen kann. Es existiert eine Schwachstelle in der Ausnahmebereinigung von vm2 für Versionen bis 3.9.16, die es Angreifern erlaubt, eine unsanitized...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 war eine der Pixel-Bootloader-Schwachstellen, die von beaups und Jon 'jcase' Sawyer gefunden/ausgearbeitet wurden. Haftungsausschluss Dies ist ein schmutziger POC, der nie zur Veröffentlichung gedacht war. Ich habe nur ein anderes Projekt kopiert,...

CVE-2021-36260

Hikvision - Vulnerabilità RCE CVE-2021-36260 Descrizione della vulnerabilità Un utente malintenzionato può sfruttare questa vulnerabilità per ottenere un controllo completo del dispositivo con una shell root illimitata, anche se il proprietario del dispositivo è limitato a una shell protetta...

CVE-2021-21425

CVE-2021-21425 GravCMS Escrita/Atualização Arbitrária de YAML Não Autenticada leva à Execução de Código CVE-2021-21425 Referência: https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/...

PS4-6.20-WebKit-Code-Execution-Exploit

PS4 6.20 WebKit Code Execution PoC Este repositório contém uma prova de conceito PoC de execução remota de código RCE que visa o PlayStation 4 no firmware 6.20, explorando a CVE-2018-4441. O exploit primeiro estabelece uma primitiva de leitura/escrita arbitrária, bem como um vazamento de endereço...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 e CVE-2024-1709 Una prova di concetto sviluppata da @watchTowr per sfruttare un bypass dell'autenticazione al fine di aggiungere un nuovo utente amministrativo in ConnectWise ScreenConnect. Questo è il primo passo di una banale catena di esecuzione remota di comandi. Segui il team d...

artemis2hashcat

artemis2hashcat Beschreibung Python3-Implementierung zum Konvertieren von Artemis-PBKDF2WithHmacSHA1-Hashes in das hashcat-Format Verwendung Die Standardkonfiguration von Apache Artemis verwendet den DefaultSensitiveStringCodec, um Benutzerpasswörter als PBKDF2WithHmacSHA1-Hashes in der Datei...

Rootsmart-v2.0

Rootsmart 2.0 con cve-2019-2215 + Ransomware Dichiarazione di non responsabilità Questo progetto è esclusivamente a scopo educativo. Questo progetto utilizza codice da rkshrksh/2048-Game e kangtastic/cve-2019-2215. Descrizione del progetto Questo progetto fa parte del modulo Mobile Security del...

EUVD-2026-67575

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79996

The User Registration & Membership WordPress plugin versions before 5.2.6 lack a capability check when saving login settings. An authenticated user with the plugin's management capability (but not full administrator access) can modify arbitrary site options to escalate privileges to administrator...

CVE-2026-79996 User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

CVE-2026-79706

CVE-2026-79706 affects the Breeze Cache WordPress plugin in versions prior to 2.5.13 . The root cause is an unsanitised request value used to construct cache file paths, enabling unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory. ...

EUVD-2026-67573

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79996 User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...