833764 matches found
CVE-2026-61752
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61755
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61750
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-58567
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...
netgear-pwnagent
PwnAgent Este es el PoC para CVE-2023-24749, también conocido como PwnAgent, una RCE del lado WAN con un solo clic en los enrutadores Netgear RAX. Puedes desencadenar este exploit visitando http://pwn.mahaloz.re. Explicación Por favor, visita el blog que explica esto aquí...
CVE-2022-26134-Exploit-Detection
Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone root@kitploit: git clone...
CVE-2019-11932-whatsApp-exploit
CVE-2019-11932-whatsap-exploit La dirección de system y el gadget deben ser reemplazados por la dirección real encontrada mediante una vulnerabilidad de divulgación de información. Después de reemplazar la dirección de system y el gadget. Ejecuta el código para generar el archivo GIF corrupto:...
cacti-rce-snmp-options-vulnerable-application
Cacti v1.2.24 inyección de comandos autenticada CVE-2023-39362 aplicación vulnerable Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2023-39362. ¡ADVERTENCIA! ¡Esta aplicación contiene vulnerabilidades de seguridad graves. Úsela bajo su propio riesgo! Se...
CVE-2021-2394
CVE-2021-2394 POC de CVE-2021-2394 Descargo de responsabilidad El proyecto es solo para fines educativos. Cualquier consecuencia o pérdida directa o indirecta causada por pruebas no autorizadas será responsabilidad del usuario. Notas El POC utiliza IIOP para enviar paquetes. Agregue las...
Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs
Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...
github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object
A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...
CVE-2020-13942
CVE-2020-13942 Apache Unomi pre-auth RCE CVE-2020-13942 exploit POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...
CVE-2022-46169
Cacti v1.2.22: Vulnerabilidad de inyección de comandos sin autenticar CVE-2022-46169 Basado en el exploit PoC de ariyaadinatha para CVE-2022-46169...
CVE-2021-3899_PoC
CVE-2021-3899 PoC Reproducción 0. Instala una versión anterior de apport: sudo apt-get install apport=2.20.11-0ubuntu27 cualquier versión apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 Pero este pid...
incomplete-exploit-for-CVE-2018-4150-bpf-filter-poc-
Este repositorio no tiene un README...
CVE-2018-8174-msf
CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...
cve-2020-10977-read-and-execute
CVE-2020-10977 read and execute About CVE-2020-10977 HackerOne Report: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 How to reproduce excecution part manually: From reading to execution About this repository getsecret.py - main script. It uses...
CVE-2017-16995
The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...
