CVE-2025-67888

CVE-2025-67888 Vulnerabilità di Iniezione di Comandi del Sistema Operativo in Control Web Panel = 0.9.8.1208 admin/index.php Versioni Affette: Versione 0.9.8.1208 e versioni precedenti. Descrizione della Vulnerabilità: L'input utente passato tramite il parametro GET "key" a /admin/index.php quand...

CVE-2025-67887

CVE-2025-67887 1C-Bitrix = 25.100.500 Modulo di Traduzione Vulnerabilità di Esecuzione Remota di Codice...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Übersetzungsmodul Remote Code Execution-Schwachstelle...

CVE-2022-32132

CVE-2022-32132 per osTicket | Sistema di ticketing di supporto XSS riflesso: root@kitploit: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

poc_CVE-2025-68613

PoC: n8n Sandbox Escape CVE-2025-68613 Solo a scopo educativo Questa Proof of Concept dimostra una vulnerabilità critica CVE-2025-68613 in n8n. Non utilizzarla su sistemi di cui non sei proprietario o per cui non hai esplicita autorizzazione. Panoramica della vulnerabilità Le versioni di n8n...

D-Link

CVE-2024-10914 D-Link Remotecodeausführung RCE D-Link NAS- Befehlsinjektion über den Namensparameter CVE-2024-10914:- Es wurde eine Schwachstelle in D-Link DNS-320, DNS- 320LW, DNS-325 und DNS-340L bis 20241028 gefunden. Sie wurde als kritisch eingestuft. Von dieser Schwachstelle betroffen ist di...

CVE-2026-10036

SpeechBrain versions before 1.1.1 contain an arbitrary code execution vulnerability in its checkpoint recovery mechanism. The root cause is the use of PyYAML's unsafe loader when parsing CKPT.yaml metadata files during candidate enumeration in Checkpointer.recover_if_possible(). An attacker who c...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

EUVD-2026-67226

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, Exploit SAP root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

CVE-2022-39802

3242933 – CVE-2022-39802 Vulnerabilità di path traversal nei file in SAP Manufacturing Execution Informazioni generali Rischio: CRITICO Versioni Affette: root@kitploit: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 URL del fornitore: https://sap.com Bug:...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Kritische Cisco AsyncOS Schwachstelle 🔍 Überblick CVE‑2025‑20393 ist eine kritische Remotecodeausführung RCE ‑Schwachstelle in Cisco AsyncOS Software , die folgende Geräte betrifft: Cisco Secure Email Gateway physisch & virtuell Cisco Secure Email and Web Manager physisch &...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 Prova di Concetto La POC che stavo usando per dimostrare CVE-2015-2231 'Get Super Serial'. Alcune persone mi hanno chiesto di pubblicarla in modo che potessero usare cose simili su altri dispositivi basati su firmware ADUPS che presentano questa vulnerabilità...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

EUVD-2026-67224

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2023-27372-PoC

Questa è una proof of concept della vulnerabilità RCE CVE-2023-27372 in SPIP. È un difetto di deserializzazione che sfrutta l'uso pericoloso del tag ENV durante la funzionalità di reset della password spip.php?page=spippass all'interno di /ecrire/balise/formulaire.php. Nello specifico questa riga...