853596 matches found
exploit-CVE-2018-15139
Exploit OpenEMR CVE-2018-15139 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...
F5-BIG-IP-exploit
Exploit de F5-BIG-IP CVE-2022-1388 usage: CVE-2022-1388.py -h -u URL -c COMMAND -f FILE CVE-2022-1388 F5 BIG-IP iControl REST Bypass de Autenticación RCE Ejemplo: root@kitploit: python3 CVE-2022-1388.py -u https://127.0.0.1 python3 CVE-2022-1388.py -u https://127.0.0.1 -c 'cat /etc/passwd' python...
CGA-H8WF-5GWW-54C6
Bulletin has no description...
CGA-FCX3-QW44-R2RC
Bulletin has no description...
CGA-RP3M-HFPM-4MV4
Bulletin has no description...
CGA-89V5-V44Q-92CJ
Bulletin has no description...
CGA-W6QQ-3RM2-66VH
Bulletin has no description...
CGA-W8F8-7C84-V79J
Bulletin has no description...
CGA-F7MR-Q5M5-RXMX
Bulletin has no description...
CGA-H7XR-PQ63-282R
Bulletin has no description...
CGA-FR66-JCQ6-2RQG
Bulletin has no description...
PS-2017-13---CVE-2018-9950
Foxit Reader PDF解析越界读取信息泄露漏洞 漏洞 内存缓冲区边界内操作限制不当漏洞 漏洞描述 此漏洞允许远程攻击者在受影响的 Foxit Reader 安装上泄露敏感信息。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 PDF 文档的解析过程中。问题源于未能正确验证用户提供的数据，可能导致读取已分配对象末尾之后的数据。攻击者可结合其他漏洞利用此问题，在当前进程上下文中执行代码。 CVE ID CVE-2018-9950 厂商 www.foxitsoftware.com 产品 Foxit Reader 8.3.5.30351 及更早版本 Fox...
cve-2018-8389
jscript.dll - ActiveXObject BSTR - Use After Free Vulnerabilidad Hacer referencia a memoria después de haber sido liberada puede provocar que un programa se bloquee, use valores inesperados o ejecute código. Descripción de la vulnerabilidad Existe una vulnerabilidad de ejecución remota de código ...
CVE-2019-0678
Vulnerabilidad Vulnerabilidad de elevación de privilegios en Microsoft Edge Descripción de la vulnerabilidad Esta vulnerabilidad permite a un atacante ejecutar código JavaScript en cualquier host sin permiso, también puede robar archivos locales del sistema y esto además resulta en el cambio de...
CVE-2026-76866
Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...
CVE-2026-76862
Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including ntoolsstartsetcgi, ntoolstcpdumpstartsetcgi, exedefault, and ntoolsproc components. Attackers can inject crafted arguments into these tcpdump launch routines ...
CVE-2026-73807
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions...
CVE-2026-10144
Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...
ziti v2.0.5
OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...