CVE-2026-78195

A Cross-Site Scripting XSS vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser...

CVE-2026-78612

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78613

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78008

A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

DEBIAN-CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-19318

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-61800

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution und Docker Labor Klonen wir das Repository mit gitclone, dann navigieren wir zu apisix-docker/examples. In dieser docker-compose.yml Datei haben wir bereits image: apache/apisix:2.12.0-alpine geändert, da die Sicherheitslücke in dieser Version existiert...

cve-2021-42013-docker-lab

CVE-2021-42013 Introdução Foi descoberto que a correção para CVE-2021-41773 no Apache HTTP Server 2.4.50 era insuficiente. Um atacante poderia usar um ataque de path traversal para mapear URLs para arquivos fora dos diretórios configurados por diretivas do tipo Alias. Se arquivos fora desses...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server sfruttato Apache HTTP Server CVE-2021-41773 sfruttato in natura CVE-2021-42013: Path Traversal ed esecuzione di codice remoto in Apache HTTP Server 2.4.49 e 2.4.50 fix incompleto di CVE-2021-41773 Shodan oneliner...

electroniz3r

electroniz3r Take over macOS Electron apps' TCC permissions with electroniz3r. The tool has been presented for the first time on DEFCON31 in Las Vegas during my ELECTRONizing macOS privacy - a new weapon in your red teaming armory talk. Overview root@kitploit: $ electroniz3r OVERVIEW: macOS Red...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok-Konfiguration CVE-2018-11235-Git PoC und Tunneling mit Docker Ngrok Dockerfile erstellen root@kitploit: $ docker build -t cve-2018-11235 . Benutzerdefiniertes Netzwerk für ngrok erstellen root@kitploit: $ docker network create myngroknet...

mantis_rce

mantisrce Python-Skript, um RCE auf Mantis Bug Tracker vor Version 1.2.x zu erlangen Weitere Informationen finden Sie unter CVE-2008-4687...

cve-2018-11776-docker

CVE-2018-11776 Docker container e POC exploit scritto in Go Puoi creare la tua immagine ed eseguirla: root@kitploit: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename Oppure puoi semplicemente scaricare quella che ho creato con amore per te: root@kitploit:...

Node.js-CVE-2017-5941

Demo della vulnerabilità di deserializzazione non sicura in NodeJS Node.js è un ambiente di runtime open-source utilizzato per implementare funzionalità server in JavaScript. Un pacchetto software specifico all'interno di Node.js contiene una funzione vulnerabile che gestisce la deserializzazione...

CVE-2023-22047

Beschreibung: CVE-2023-22047 ist ein nicht authentifizierter Datei-Lesevorgang in Oracle PeopleSoft. Fortgeschrittene Angreifer können diese Schwachstelle jedoch ausnutzen, um Remote-Code-Ausführung Remote Code Execution, RCE zu erzielen. In der PeopleSoft-Anwendung "Portal.war" ermöglicht das...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF Deserialisierung Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Installation:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Referenz: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC...