622286 matches found
gollina
root@kitploit: $ gollina -h gollina Follina MS-MSDT 0-day MS Office RCE PoC in Go -- @dwisiswant0 Usage: gollina -c COMMAND OPTIONS... Options: -h, --host Listener host default: 0.0.0.0 -p, --port Listener port default: 8090 -n, --name Word file name w/o extension, default: gollina -c, --command...
Expoitation-de-la-vuln-rabilit-CVE-2022-22965
CVE-2022-22965 भेद्यता का शोषण CVE-2022-22965 भेद्यता, जिसे Spring4Shell के नाम से जाना जाता है, Java Spring Core फ्रेमवर्क में एक दूरस्थ कोड निष्पादन RCE दोष है, जो संस्करण 5.3.18 और 5.2.20 से पहले के संस्करणों में मौजूद है। यह भेद्यता एक हमलावर को Tomcat लॉग के गलत कॉन्फ़िगरेशन का शोषण करके कोड...
CVE-2024-4358_Mass_Exploit
CVE-2024-4358MassExploit Modifizierte Werkzeuge von @sinsinology für Massenexploit. Voraussetzungen Python 3.x Installation root@kitploit: git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt Ausführung root@kitploit: usag...
PicusSecurity4.Week.Repo
GitHub-Repo für die Follina-Schwachstelle CVE-2022-30190 : CVE 0-day MS Office RCE, auch bekannt als msdt follina...
CVE-2022-26134
CVE-2022-26134 حقن تعبير OGNL في Confluence يؤدي إلى RCECVE-2022-26134 برهان المفهوم والاستغلال تحديث إضافة تجاوز الصندوق الرملي sandbox bypass، ودعم الإصدارات العالية. الاستخدام root@kitploit: Usage: python Confluencecve202226134RCE.py http://example.com/ سيتحقق السكريبت تلقائياً من وجود الثغرة ...
EUVD-2026-37015
gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads...
CVE-2024-0044
CVE-2024-0044/A-307532206 ist eine Schwachstelle mit hohem Schweregrad im Android-Framework, die es Angreifern mit ADB-Zugriff ermöglicht, beliebigen Code unter der UID einer beliebigen App auszuführen. Sie wurde ursprünglich von Tom Hebb vom Meta Red Team X gefunden. Im Internet finden sich viel...
PoC-CVE-2017-0199
PoC-CVE-2017-0199 भेद्यता RCE Microsoft RTF के लिए एक्सप्लॉइट टूलकिट। इस भेद्यता के बारे में: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...
SharpStrike
SharpStrike SharpStrike è uno strumento di post-exploitation scritto in C che utilizza CIM o WMI per interrogare sistemi remoti. Può utilizzare credenziali fornite o la sessione dell'utente corrente. Nota: Alcuni comandi utilizzeranno PowerShell in combinazione con WMI, indicati con nel comando...
CVE-2020-14883
CVE-2020-14883 Oracle WebLogic Server Authentifizierte Remote-Codeausführung RCE Eine Schwachstelle im Produkt Oracle WebLogic Server von Oracle Fusion Middleware Komponente: Console. Betroffene unterstützte Versionen sind 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 und 14.1.1.0.0. Die leicht...
nodejs:24 security update
An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
sqlite security update
An update is available for sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset o...
Wordfence Argus Finds Complex 6 Step Critical RCE in Avada Theme with 1 Million Sales
A year ago we wrote that we'd put AI to work across the whole company, turning everyone on the team into a capable AI operator so our defenders could stay ahead of the threat actors attacking the sites we protect. In April we showed where it was heading: in the space of a few months, AI-assisted...
CVE-2019-11447
CVE-2019-11447 - PoC Explora o CuteNews 2.1.2 através de verificações de upload de arquivo inadequadas usadas ao carregar uma imagem de avatar, levando a RCE. Instalação Clone o repositório e instale os requisitos. pip install -r requirements.txt Uso Para carregar um avatar, você precisará de uma...
CVE-2026-75750 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2026-65688
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-75767
Substance3D – Painter (Adobe) is affected by a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vec...
CVE-2026-75750
Adobe Substance3D Painter is affected by a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vecto...
CVE-2026-75767 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)
Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...