CVE-2022-30136

CVE-2022-30136 Exploit remoto del sistema di file di rete Windows DoS PoC PoC: https://github.com/fortra/CVE-2022-30136 Dettagli: https://www.coresecurity.com/core-l...136-windows-network-file-system-vulnerability Prodotti interessati : Windows Server 2016, 2019...

CVE-2020-11110-Proof-of-Concept

Questo repository non contiene un README...

dirty-pipe

Dirty Pipe - CVE-2022-0847 Questo è semplicemente il codice e le istruzioni per utilizzare l'exploit di Max Kellermann per CVE-2022-0847 noto come Dirty Pipe. Visita https://dirtypipe.cm4all.com/ per leggere di più su come funziona l'exploit! Come utilizzare 1. Scarica e compila il binario...

CVE-2026-59565

CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...

grafanaExp

grafanaExp Utilizza la vulnerabilità di lettura arbitraria dei file CVE-2021-43798 di Grafana, rileva automaticamente se esiste una vulnerabilità, i plugin presenti, estrae la chiave, decifra il file db del server e restituisce le informazioni datasourrce. Utilizzo Fornisce funzionalità exp e...

CVE-2026-78250 bytebot-ai bytebot Agent Execution Workflow infinite loop

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

CVE-2026-78250

bytebot-ai bytebot 0.0.1 is affected by a vulnerability in the Agent Execution Workflow component where manipulation of an unknown function leads to an infinite loop , resulting in a denial of service (availability impact only). The attack can be performed remotely and requires low privileges (CV...

Exploit for CVE-2026-18963

POC-CVE-20...

CVE-2026-78247

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , triggered through manipulation of the ID argument in the file /fos/admin/ajax.php?action=confirm_order. The flaw allows a remote, unauthenticated attacker to inject SQL commands, leading to low impact ...

CVE-2026-78247 SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

EUVD-2026-64838

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

regreSSHive

regreSSHive Exploit SSH riscritto per CVE-2024-6387 regreSSHion...

CVE-2026-64600-Exploit

इस रिपॉजिटरी में README नहीं है।...

CVE-2023-23752

Installation root@kitploit: git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh Verwendung root@kitploit: ./exploit.sh http://localhost...

CVE-2026-78244

A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...

EUVD-2026-64777

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

Astra Linux – Vulnerability in Apache2

When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...

Astra Linux – Vulnerability in Chromium

In Google Chrome versions prior to 87.0.4280.88, uninitialized use of V8 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.107, using Autofill in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, using WebAudio with "after free" in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...