CVE-2026-84165 Lack of authorisation in OpenNebula by OpenNebula Systems

A vulnerability relating to incorrect access control in OpenNebula by OpenNebula Systems, affecting all versions prior to 7.4. This vulnerability could allow an authenticated user with basic permissions to execute commands on virtual machines belonging to other users via the one.vm.exec function,...

CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – 通过 @Grab 的 Jenkins Pipeline 共享库代码执行 程序代码（Groovy 流水线） root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline 共享库远程代码执行 概述 Jenkins 流水线从并非完全可信的源加载共享库。该库使用 @Grab 注解下载外部 Maven 构件，其中可能包含恶意类，在 Groovy...

CVE-2020-13756-env

CVE-2020-13756 漏洞环境 针对 CVE-2020-13756 的易受攻击测试环境 - Sabberworm PHP CSS 解析器远程代码执行。 漏洞详情 字段| 值 ---|--- CVE| CVE-2020-13756 产品| Sabberworm PHP CSS 解析器 受影响版本| getSelectorsBySpecificity' ' . $GET'n'; // 当 n=100;printf"test"; 时，eval 执行：eval' 100;printf"test";' 参考 NVD 修复提交 完整披露 PacketStorm 免责声明 此环境仅供授权的安全...

Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 This YouTube video 1️⃣ Target identification Nmap root@kitploit: nmap -sV -p 3632 192.168.56.102 ✅ Result will be like this: 3632/tcp open distccd v1 👉 So distcc is open and exploitable. 2️⃣ Launch Metasploit root@kitploit: msfconsole 3️⃣ Select the Distcc exploit root@kitploit: use...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...

CVE-2026-82392

A flaw was found in pnpm, a package manager. An attacker can craft a malicious pnpm-lock.yaml file that, when processed by a user running pnpm install, allows package contents to be written outside the intended nodemodules directory. If the system is configured to allow lifecycle scripts, this pa...

CVE-2026-82072

An out of bounds read flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=534416978 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2025-55182

CVE-2025-55182 Host-based detection rules for the RCE vulnerability in the React JavaScript framework...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid 空密钥利用工具 CVE-2026-1357.py 迁移、备份、暂存 – WPvivid Backup & Migration ≤ 0.9.123 漏洞类型： 未认证的任意文件上传 → 远程代码执行 CVE： CVE-2026-1357 – CVSS 9.8（严重） GitHub: https://github.com/Nxploited Telegram: @KNxploited 🧬 这个脚本的功能 CVE-2026-1357.py 是一个针对 WPvivid 漏洞的概念验证（PoC）利用工具 。它聚焦于存在缺陷的 AES...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2021-3129-Lab

CVE-2021-3129: Laboratorio RCE en Modo Debug de Laravel Laboratorio práctico para explotar CVE-2021-3129, una vulnerabilidad crítica de Laravel que permite lectura de archivos sin autenticación y posible RCE. Inicio Rápido root@kitploit: Clonar git clone...

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

CVE-2026-25706

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

CVE-2025-56515

CVE-2025-56515 Fiora聊天应用中的跨站脚本（XSS）漏洞 CVE-2025-56515：Fiora聊天应用中的跨站脚本（XSS）漏洞 漏洞概述 CVE ID : CVE-2025-56515 漏洞类型 : 跨站脚本（XSS） 攻击类型 : 远程 影响 : 代码执行 受影响产品 : Fiora聊天应用（版本1.0.0） 供应商 : suisuijiang 发现者 : Kaio Mendonça Pereira 供应商确认 : 是 参考资料 : Fiora GitHub仓库 Fiora应用 CWE-79：网页生成过程中输入的不当中性化 描述...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 第一步：演示漏洞 Web 应用（实验室） 我们创建一个类似于 CVE-2025-55182 的逻辑（不安全的服务端执行）。 📁 vulnapp/app.py root@kitploit: from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component" ❌ 存在漏洞：用户输入直接用于命令执行 result = subprocess.getoutputda...

CVE-2025-66478

1 root@kitploit: POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

Spring4Shell-Python-Firewall-POC

用于缓解 Spring4Shell CVE-2022-22965 的 Python 防火墙 1. 概述 本项目是一个以 Python 实现的简单而有效的防火墙，属于概念验证（POC）。它旨在充当 HTTP 服务器，检查传入的 POST 请求，以检测并阻止与 Spring4Shell CVE-2022-22965 远程代码执行（RCE）漏洞相关的特定载荷模式。 2. 工作原理 该防火墙利用了 Python 内置的 http.server 模块。核心逻辑位于 ServerHandler 类的 doPOST 方法中。 1. 服务器拦截所有传入的 POST 请求。 2. 它读取整个请求体。 3...