EUVD-2026-67009

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2026-81753 Flowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content

Affected versions of Flowintel render Mermaid blocks contained in stored case notes without sufficiently neutralizing attacker-controlled markup. Because Mermaid note content is persisted and later rendered for other users, an attacker with permission to create or edit a note could store a crafte...

CVE-2024-33438

Произвольная загрузка файлов ведёт к RCE CVE-2024-33438 CubeCart После запуска ожидаемый вывод при успешной эксплуатации выглядит так: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please wait...

CVE-2024-37054-MLflow-RCE

root@kitploit: | / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: PoC удаленного выполнения кода в MLflow...

CVE-2024-25292

RenderTune RCE Подтверждение концепции для уязвимости CVE-2024-25292. Межсайтовый скриптинг XSS в RenderTune v1.1.4 позволяет злоумышленникам выполнять произвольные веб-скрипты или HTML-код с помощью специально сформированной полезной нагрузки, внедряемой в параметр Upload Title. В этом репозитор...

CVE-2024-4358

Telerik Report Server 인증 우회 - CVE-2024-4358 고지사항 : 이 개념 증명POC은 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전 상호 동의 없이 이 도구를 사용하여 대상을 공격하는 것은 불법입니다. 모든 해당 지역, 주, 연방 법률을 준수하는 것은 최종 사용자의 책임입니다. 개발자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인한 오용이나 피해에 대해 책임지지 않습니다. 시작하기 대상 찾기 잠재적인 대상을 찾으려면 FofaShodan.io와 유사를 사용하세요: FOFA Dork :...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

EUVD-2026-67007

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Неаутентифицированное произвольное выполнение SQL-запросов с переходом к удалённому выполнению кода CVE-2024-43918 Плагин WBW Product Table Pro для WordPress уязвим к неавторизованному произвольному выполнению SQL-запросов из-за отсутствия проверки прав...

CVE-2019-17621

DLink RCE уязвимость CVE-2019-17621 неавторизованное удаленное выполнение кода FAT может это эмулировать, так что пожалуйста используйте attifyos...

CVE-2026-66155

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-66155

Siemens Element maps-ng (V47, V48, V49) is affected by an XSS vulnerability in the si-map component. The root cause is improper neutralization of user-controllable input in the points property, which is used to render the tooltip label of map pins . An attacker can craft a malicious URL that, whe...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2: Произвольная загрузка файлов -purple 📌 Описание Плагин CSV Mass Importer ≤ 1.2 для WordPress содержит уязвимость Admin+ Arbitrary File Upload произвольная загрузка файлов администратором. Из-за неправильной проверки загружаемых файлов пользовател...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 では、攻撃者が管理者権限を持っている場合に 悪意のあるCスクリプトを作成し、サーバー上で実行することによりリモートコード実行が可能です デフォルトでは、ポート8101の管理者コントロールパネルのサーバー設定を介して。 使用方法: python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd "shutdown /s /t 30" PoC:...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — Проект Red Team Департамент кибербезопасности ITSOLERA | Стажировка по наступательной безопасности 2026 Обзор Данный проект исследует, воспроизводит и документирует CVE-2018-7600 Drupalgeddon2 — критическую CVSS 9.8 уязвимость удалённого выполнения кода без...

CVE-2026-80563

A flaw was found in the Linux kernel's gpio: sloppy-logic-analyzer component. A local attacker with root privileges can exploit a race condition during the unbinding of a platform device. This vulnerability allows writing into memory that has already been freed, which can lead to system instabili...

CVE-2026-74746

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

CVE-2026-73426

A flaw was found in Trix, a rich text editor. An attacker can exploit a cross-site scripting XSS vulnerability by crafting malicious HTML with a data-trix-serialized-attributes attribute. This attribute can bypass the DOMPurify sanitizer, allowing the execution of arbitrary JavaScript in a user's...

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 уязвим для RCE из-за небезопасной десериализации Java. Эксплойт атакует транспортный протокол на порту 9300. Десериализация основана на цепочке Groovy MethodClosure для достижения RCE...