846834 matches found
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco 漏洞: CSCur90888 漏洞利用标题 : Cisco UCS Manager - 2.21d - 远程命令执行 描述 : 运行于 Firepower 9000 设备上的 Cisco FX-OS（1.1.2 之前版本）和 Cisco Unified Computing System UCS Manager（2.24b 之前版本、2.25 至 2.25a 之前版本、3.0 至 3.02e 之前版本）中存在一个未指定的 CGI 脚本，远程攻击者可通过精心构造的 HTTP...
CVE-2026-87911
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...
Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache
CVE-2023-6063 — WP Fastest Cache SQL Injection PoC !Python...
htb-recon-web
htb-recon A web dashboard that runs a full enumeration pipe...
tenda-hg10-rce
CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...
CVE-2025-55182-Exploit-extension
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...
CVE-2025-63579
CVE-2025-63579 Unauthorized access to all user names and passwords entered in the Address Book feature found in Kyocera Command Center RX printers. Description Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that...
github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution
A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...
CVE-2026-87911
CVE-2026-87911 is a CRITICAL (CVSS 9.6) OS command injection vulnerability in the SQL validation component of Amazon awslabs postgres-mcp-server prior to version 1.1.7. The flaw lies in the read-only enforcement , which can be bypassed by injecting a crafted COPY ... TO PROGRAM statement into con...
CVE-2026-87911 Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...
CVE-2026-87911 Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...
EUVD-2026-75127
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...
CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-
CVE-2026-22003 – Escape del sandbox Lua de Redis mediante debug.sethook Código del programa disparador Lua + Python root@kitploit: -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id...
CVE-2026-5059-poc
¿Dónde está CVE-2026-5059 en el código? La vulnerabilidad está en dos archivos que trabajan juntos: Archivo 1: tools.py — La causa raíz La versión antigua usaba shell=True en executepipedcommand: root@kitploit: CÓDIGO ANTIGUO VULNERABLE process = subprocess.run command, ← cadena sin procesar pasa...
CVE-2026-34227
Interfaz MCP no autenticada + Bypass de CORS El servidor MCP de Sliver levanta una interfaz SSE no autenticada y responde con Access-Control-Allow-Origin: en cada respuesta. La librería mcp-go no valida el Content-Type, por lo que las Solicitudes Simples text/plain omiten por completo la...
detection-rules dev-v2.2.0
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
CVE-2024-53677-POC
CVE-2024-53677 一个老旧的漏洞，影响 Apache Struts，可导致 LFI 和远程执行。 关于该漏洞的更多信息，你可以参考这篇很棒的博客。 Apache Struts 路径遍历 → RCE CVE-2024-53677 POC 用法 我花了很多时间把这个 POC 做得尽可能可定制，因为当我第一次遇到这个 CVE 时，没有找到一个正确实现它的好来源。 大多数参数都有默认值，所以不要被这些参数吓到。 root@kitploit: git clone https://github.com/Cythonic1/CVE-2024-53677-POC cd...
CVE-2026-20896
CVE-2026-20896：Gitea Docker 镜像认证绕过 PoC !WARNING 仅在本地实验室或针对您明确获得授权测试的系统上使用此 PoC。 https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b 概述 CVE-2026-20896 是受影响官方 Gitea Docker 镜像中的认证绕过漏洞。当启用反向代理认证时，镜像生成的 REVERSEPROXYTRUSTEDPROXIES = 设置允许能够访问 Gitea 后端的客户端通过 X-WEBAUTH-USER...
CVE-2026-22679
CVE-2026-22679: Weaver E-cology RCE no autenticado vía Endpoint de Depuración dubboApi -critical TL;DR Weaver E-cology 10.0 anterior a la compilación 20260312 contiene una vulnerabilidad crítica de ejecución remota de código sin autenticación en el endpoint...
