CVE-2024-4577

CVE-2024-4577 - Injeção de Argumentos em PHP CGI - RCE Resumo CVE-2024-4577 é uma vulnerabilidade crítica de injeção de argumentos no PHP CGI que afeta sistemas Windows que executam PHP em modo CGI. Essa falha permite que atacantes remotos injetem argumentos na linha de comando do PHP por meio de...

CVE-2024-25600

Exploit RCE per Bricks Builder CVE-2024-25600 Questo progetto contiene uno script di exploit basato su Python che mira alla vulnerabilità di esecuzione remota di codice RCE del plugin WordPress Bricks Builder, identificata come CVE-2024-25600. L'exploit consente l'esecuzione remota non autorizzat...

CVE-2024-1212

CVE-2024-1212 - Unbefugte Befehlseinschleusung in Progress Kemp LoadMaster Dies ist ein Exploit-Skript für CVE-2024-1212 , eine Schwachstelle zur unbefugten Befehlseinschleusung in Progress Kemp LoadMaster. Zusammenfassung der Schwachstelle CVE-2024-1212 betrifft Progress Kemp LoadMaster und...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS कमांड इंजेक्शन एक्सप्लॉइट यह Python-आधारित एक्सप्लॉइट /cgi-bin/accountmgr.cgi?cmd=cgiuseradd एंडपॉइंट के माध्यम से कई D-Link NAS उत्पादों में कमांड इंजेक्शन भेद्यता को लक्षित करता है। यह भेद्यता बिना प्रमाणीकरण वाले हमलावरों को प्रभावित डिवाइस पर मनमाने सिस्टम कमांड...

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST - Bypass de Autenticação RCE Este script Python explora o CVE-2022-1388, uma vulnerabilidade crítica no F5 BIG-IP iControl REST que permite execução remota de comandos não autenticada através de controle de acesso inadequado e manipulação de cabeçalhos HTTP...

CVE-2020-7247

CVE-2020-7247 Proof-of-Concept-Exploit für CVE-2020-7247 Remote-Ausführung auf OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 getestet auf: OpenBSD 6.6 Dank an Marco Ivaldi [email protected] für den Payload Verwendung remote $ go run CVE-2020-7247.go -u...

CVE-2018-7600

CVE-2018-7600 Exploit Proof of Concept per Drupal CVE-2018-7600 RCE con Pseudo-Shell e supporto proxy...

EUVD-2026-67219

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2026-18885

CVE-2026-18885 is a code injection vulnerability in the ServiceNow AI platform , specifically in its GraphQL Composite Data API , enabling an unauthenticated attacker to execute arbitrary code and access or modify instance data. The CVSS 4.0 base score is 10.0 (Critical) with all impact dimension...

CVE-2026-18885 Unauthenticated Remote Code Execution in GraphQL Composite Data API

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2023-5044

CVE-2023-5044 Iniezione di codice tramite l'annotazione nginx.ingress.kubernetes.io/permanent-redirect Innanzitutto, devi distribuire Pod e Service: root@kitploit: kind: Pod apiVersion: v1 metadata: name: apple-app labels: app: apple spec: containers: - name: apple-app image: hashicorp/http-echo...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server Questa vulnerabilità consente a un attaccante non autenticato di eseguire remotamente codice arbitrario su un server Confluence vulnerabile. La vulnerabilità esiste a causa di una validazione impropria dell'input fornito dall'utente nella...

CVE-2020-27955

CVE-2020-27955 धन्यवाद https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

CVE-2018-14667

CVE-2018-14667 env il rich.ser può aprire Calculator.app solo su MacOs scarica questo progetto. il programma PoC è in web-inf/src/Main.java...

Aurora

Aurora RAT Informazioni Aurora RAT, o strumento di amministrazione remota, è scritto in Go. Questo progetto è nato per imparare il networking in Go e per muovere i primi passi nel campo della sicurezza. Utilizzo Compila ed esegui Main.go, poi esegui lo stub sul computer che desideri controllare...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull da Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Avvia il server HTTP Git docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study Estudo aprofundado do CVE-2019-18935 que afeta o Telerik UI para ASP.NET AJAX. Abrange a vulnerabilidade de desserialização .NET, o manipulador RadAsyncUpload, cadeias de gadgets, exploração de assemblies em modo misto e estratégias de mitigação...

CVE-2018-8284-Sharepoint-RCE

CVE-2018-8284-Sharepoint-RCE...

CVE-2024-51378

CVE-2024-51378 Analisi della vulnerabilità CVE-2024-51378, script per la ricerca di host vulnerabili, utilizzo dell'exploit in modalità single-thread e multi-thread in Python e nuclei. L'uso degli script è consentito solo a scopo didattico su host di test. 1-CVE-2024-51378.pdf - file principale c...

CVE-2026-6876 Sandbox Escape in Now Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the Now Platform, potentially leading to more access to the Now Platform than intended. ServiceNow deployed a...