Piwik Loader.php Backdoor RCE

Exploits the historical Piwik Loader.php backdoor via the g=system query parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Piwik/Matomo Loader.php backdoor RCE — execute session.""" from future import annotations import re from kittysploit import from...

CVE-2025-70121

The free5GC open-source 5G mobile core network project, specifically version v4.0.1 , contains an array index out of bounds vulnerability in its AMF component . The issue is triggered within the GetSUCI method of NAS_MobileIdentity5GS.go when the software attempts to access index 5 of a 5-element...

BUK TS-G System SQL Injection Code Execution

The vulnerability of the configuration module of the automation system “BUK TS-G” is related to the failure to protect SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted SQL query...

CVE-2025-56394

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow...