CVE-2026-75573

In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclos...

CVE-2026-57499

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

[R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1 Arnie Cabral Thu, 08/27/2026 - 13:05 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID |...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 descrive una vulnerabilità di OS Command Injection Iniezione di comandi di sistema presente nel software My Computer del sistema operativo Pardus. Questa vulnerabilità consente a un utente di iniettare comandi di sistema tramite il parametro nome file, permettendo co...

CVE-2025-54100

CVE-2025-54100 Il curl di PowerShell utilizza Invoke-WebRequest internamente. root@kitploit: PS C:\Users\melih curl cmdlet Invoke-WebRequest at command pipeline position 1 Supply values for the following parameters: Uri:...

CVE-2022-22954

CVE-2022-22954 PoC RCE tramite SSTI in VMware Workspace ONE Access e Identity Manager. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fil...

Embedded-Backdoor-Connection

Eingebettete Hintertür-Verbindung über PDF-Dateien 😈 präsentiert von Einleitung Dieses Demonstrationsvideo zeigt, wie wir das Gerät des Opfers kontrollieren können, indem wir die harmlos aussehende PDF-Datei an das Ziel senden, die tatsächlich eine eingebettete Nutzlast enthält. Der Exploit wurde...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 Exemplo de código PHP de PoC para CVE-2017-5638 Uso php exploit.php "http://127.0.0.1:8080/example/index.action" "command" USE POR SUA CONTA E RISCO...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Strumenti di rilevamento sicuri per due famiglie correlate di vulnerabilità di escalation dei privilegi locali del kernel Linux — Copy Fail CVE-2026-31431 e Dirty Frag CVE-2026-43284 / CVE-2026-43500 — entrambe che interessano tutte le...

CVE-2024-2997

CVE-2024-2997 Scanner Panoramica CVE-2024-2997 Scanner è uno scanner di vulnerabilità avanzato progettato per rilevare la vulnerabilità di command injection nelle applicazioni web. Questo strumento aiuta i professionisti della sicurezza a identificare potenziali rischi di sicurezza nelle loro...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST-Sicherheitslücke CVE-2022-1388 Verwendung Dieser POC ist verifiziert! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length:...

CVE-2015-5287

CVE-2015-5287 RHEL 7.0/7.1 - 'abrt/sosreport' Escalatazione dei Privilegi Locali Dona Aiuta a mantenere questo progetto Se trovi utile questo progetto, considera di supportare la sua manutenzione continua tramite PayPal o ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 PASSO 1: Demo di web-app vulnerabile LAB Creiamo una logica simile a CVE-2025-55182 esecuzione non sicura lato server. 📁 vulnapp/app.py root@kitploit: from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data =...

OPENSUSE-SU-2026:21667-1 Security update for file-roller

This update for file-roller fixes the following issues: Changes in file-roller: - CVE-2026-78322: Check line length when parsing command output bsc1276442...

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation

Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation Sfrutta automaticamente i sistemi con davfs2 vulnerabile CVE-2013-4362 A COSA SERVE? Semplicemente due script .sh per semplificare lo sfruttamento di davfs2 con versioni vulnerabili Prerequisiti Almeno uno dei moduli 'fuse' o 'coda' non deve...

CVE-2020-9047

Menu de Uso/Ajuda root@kitploit: usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVisi...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2019-12744

CVE-2019-12744 Informationen Exploit-Titel: Remote-Befehlsausführung durch nicht validierten Datei-Upload in SeedDMS-Versionen 5.1.11 CVE: CVE-2019-12744 Hersteller-Homepage: https://www.seeddms.org/index.php?id=2 Exploit-Autor: NobodyAtall Getestete Version: Seeddms 5.1.10, 5.0.11 Getestetes...

Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images

Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2026-62995 DESCRIPTION: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWT...

CVE-2026-75573

CVE-2026-75573 affects mongodrdl , the data replication daemon in MongoDB Connector for BI . The root cause is that when a TLS private-key password is supplied both via the connection URI and the corresponding command-line option, mongodrdl may write that password to standard error . A local atta...