632351 matches found
CVE-2021-24499
CVE-2021-24499 | Workreap - Tema de WordPress para Mercado Freelance y Directorio 2.2.2 - Subida de Archivos Arbitraria Tema de WordPress Workreap 2.2.2 - Subida de Archivos No Autenticada que Conduce a Ejecución Remota de Código Una herramienta de explotación masiva potente y precisa para la...
CVE-2026-19136
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...
CVE-2026-19136
A potential command injection vulnerability affects the Tianxi AI Agent PC Application , distributed exclusively in the Chinese market. If a local user opens a specially crafted link handled by the application, it could allow execution of operating system commands, resulting in high impact to con...
EUVD-2026-75751
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...
CVE-2026-63427
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-63427
An authentication bypass vulnerability in Lenovo Software Fix allows a local authenticated user with low privileges to achieve arbitrary code execution with elevated privileges . The attack vector is local with low complexity and no user interaction required, yielding HIGH impact across confident...
CVE-2026-85025 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly shared MCP project endpoints due to improper enforcement of public-flow security restrictions and session isolation controls...
CVE-2026-85025
IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary code execution and chat session access/modification by an unauthenticated attacker through publicly shared MCP project endpoints . The root cause is improper enforcement of public-flow security restrictions and session iso...
React2Shell
React2Shell – Framework Avanzado de Descubrimiento y Explotación Un escáner y explotador avanzado de vulnerabilidades en React Server Components RSC para CVE-2025-55182 y CVE-2025-66478 que afectan aplicaciones Next.js. Esta herramienta amplía la investigación y prueba de concepto original de...
WMIcmd
El problema Al realizar investigaciones de bajo impacto y otras actividades similares, es posible que desees minimizar lo que se escribe en el disco / lo evidente. Esta herramienta nos permite ejecutar comandos a través de WMI y obtener información que de otro modo no está disponible a través de...
POC-CVE-2026-10134
Description PoC exploit code for CVE-2026-10134 Usage python3 poc.py -u -name -pwd -c...
CVE-2026-39987
CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: root@kitploit: /terminal/ws The endpoi...
CVE-2026-28289
🚨 CVE-2026-28289 — “Mail2Shell” RCE sin autenticación y sin clic en FreeScout mediante omisión de archivo adjunto por correo electrónico 📖 Resumen CVE-2026-28289 , apodada Mail2Shell , es una vulnerabilidad crítica de Ejecución Remota de Código RCE sin clic que afecta a FreeScout. Un atacante pue...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Ejecución remota de código no autenticada Consulta nuestra publicación del blog para obtener detalles técnicos https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC en Acción root@kitploit: python exploit-citrix-xen....
CVE-2026-89094
Forgejo versions prior to 16.0.4 are vulnerable to remote code execution (RCE) when a user creates a crafted template repository. The root cause is mishandled template expansion on files located in the .forgejo/template directory, which allows an attacker with low privileges to achieve code execu...
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
EUVD-2026-75732
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
CVE-2024-51793
Wordpress Computer Repair Shop = 3.8115 - Carga Arbitraria de Archivos No Autenticada CVE-2024-51793 El plugin CRM WordPress – RepairBuddy para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de validación del tipo de archivo en todas las versiones hasta la 3.8115...
NPM: n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
NPM: n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...