Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

CVE-2026-81491

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...

dlink_shell_poc

dlinkshellpoc Dlink-Shell-PoC Getestet auf D-Link 815 Version A 1.3 Funktioniert mit: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Hinweis: Der PoC-Code verarbeitet keine Captchas. Beispiel root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc....

CVE-2026-81486 bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-81486

bsmi021 mcp-file-context-server 1.0.0 contains a path traversal vulnerability in the Path Resolution component, specifically in the function read_context within src/index.ts. Manipulating the path argument allows an unauthenticated remote attacker to read files outside the intended directory, res...

CVE-2026-81421

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

EUVD-2026-66809

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-82805

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save pipeline/load pipeline of the file pipeline tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and...

SUSE SLES15 Security Update : distribution (SUSE-SU-2026:3786-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3786-1 advisory. This update for distribution rebuilds it against the current go security release. Tenable has extracted the preceding description block...

CVE-2026-81421 ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-81421

CVE-2026-81421 affects ddfourtwo sentry-selfhosted-mcp 0.4.0 , where the raw_sentry_api component is vulnerable to server-side request forgery (SSRF) through manipulation of the endpoint argument. The vulnerability allows remote, unauthenticated attacks with low complexity. A Proof-of-Concept exp...

CVE-2023-29489

CVE-2023-29489 AnonGhost Official द्वारा बनाया गया कैसे उपयोग करें? python3 CVE-2023-29489.py...

CVE-2020-8165

CVE-2020-8165.py CVE-2020-8165 익스플로잇을 위한 셸: https://github.com/masahiro331/CVE-2020-8165 사용법: CVE-2020-8165.py IP IP:PORT root@kitploit: CVE-2020-8165.py 2.3.2.3 10.10.10.10:4444...

CVE-2019-3396_Confluence

CVE-2019-3396Confluence Alle Dokumentation befindet sich in der Skriptdatei. Dieser Exploit ist auch Teil von der Exploit Database, die von Offensive Security verwaltet wird. Screenshots...

CVE-2010-0232

CVE-2010-0232 विंडोज सिस्टम्स NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 में प्रिविलेज एस्केलेशन के लिए एक एक्सप्लॉइट का विकास, कमजोरी CVE-2010-0232 का उपयोग करते हुए। यह एक शैक्षिक परियोजना है जो मैंने लो-लेवल कर्नेल एक्सप्लॉइट्स के भयानक विवरण सीखने के लिए शुरू की है, यह मेरा पहला ऐसा एक्सप्लॉइट है।...

CVE-2016-5636

CVE-2016-5636 PoC para CVE-2016-5636, que é um estouro de heap no Python 3.6. Este repositório inclui: crash-with-zip : PoC de crash ao ler arquivo zip não confiável google-web-engine : PoC de crash funcionando no google web engine spawn-shell : um exploit local para obter shell...

CVE-2020-16898

Dies ist eine lehrreiche Übung. Nutzung auf eigene Gefahr. CVE-2020-16898 Exploit Windows Binary PoC root@kitploit: ./CVE-2020-16898.exe -t -u wird den Exploit ausführen. ./CVE-2020-16898.exe -t 10.10.10.1 -u Administrator Meine anderen Exploits finden Sie hier Dies ist eine Lektion, warum Sie...

bluekeep_CVE-2019-0708_poc_to_exploit

Hinweis: Dieses Projekt wurde archiviert, da anderswo tatsächliche Exploits mit größerem Erfolg entwickelt wurden. https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/ Abzeichen bluekeepCVE-2019-0708poctoexploit Portierung des BlueKeep PoC von @Ekultek ...

TCGuard

TCGuard — Universal Crash, Exploit, Packet & Anti-Bot Protecti...

dirtycow

dirtycow يستخدم هذا الاستغلال استغلال pokemon لثغرة dirtycow كأساس ويقوم تلقائياً بتوليد سطر جديد في ملف passwd. سيُطلب من المستخدم إدخال كلمة المرور الجديدة عند تشغيل الثنائي. يتم بعد ذلك نسخ ملف /etc/passwd الأصلي احتياطياً إلى /tmp/passwd.bak ويتم استبدال حساب الجذر بالسطر المُولَّد. بعد تشغيل...