nfsen-exploit

nfsen-exploit 针对 nfsen 1.3.7 中 CVE-2017-6971 远程命令执行漏洞的利用程序。 已在 Ubuntu 上测试，可能适用于所有系统。 漏洞发现者：Paul Taylor/Foregenix Ltd 用法： python exploit.py 这会在远程机器上生成一个 root 权限的 shell。...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE RCE en el panel web de Apache Flink...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. root@kitploit: $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

EUVD-2026-69476

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-76658 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-76658

A vulnerability in the SSH daemon of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative access to affected hosts. Successful exploitation enables arbitrary command execution as a privileged user on the underlying operating system, leading to complete s...

CVE-2026-76658 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2026-41089-Detector

CVE-2026-41089 检测工具 这是一个用于防御巡检的 CVE-2026-41089 检测脚本。该漏洞是 Microsoft 在 2026 年 5 月安全更新中披露的 Windows Netlogon 远程代码执行漏洞。 脚本不会发送漏洞利用包，也不会尝试触发 Netlogon 异常。它优先读取受影响组件 netlogon.dll 的文件版本，其次检查已安装 KB，最后才使用系统完整构建号作为兜底判断，从而降低单纯依赖 OS 版本号造成的误报。 使用方法 检测本机 Windows 主机： root@kitploit: python .\cve202641089check.py 通...

EUVD-2026-69458

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73725 Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73725

CVE-2026-73725 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer that, when successfully exploited, allows a local attacker with low privileges to achieve arbitrary code execution with root , resulting in complete compromise of the affected host. The CVSS 3.1 base sc...

EUVD-2026-69452

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

CVE-2026-73722 Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

EUVD-2026-69449

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2025-49844

CVE-2025-49844 RediShell AI 制作的 Revshell PoC 由 AI 制作的 Redishell PoC 的未测试完成版。 原始 PoC： https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韩语部分： https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 进展？ 我们后来又接入了...

CVE-2026-73720 Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...