CVE-2026-46592

CVE-2026-46592 — camel-cxf operationName 请求头注入（SOAP 操作重定向） 针对同一 Apache Camel 漏洞的可运行概念验证复现程序，每种运行时一个： 运行时| 目录| 技术栈| 后端 SOAP 服务 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| 使用 CXF ServerFactoryBean 运行在独立端口 :9000 Camel Quarkus| camel-quarkus/|...

EUVD-2026-72638

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...

CVE-2026-86515

vgmstream up to r2117 is affected by a vulnerability in the txtp parser component, specifically the add_entry function in src/meta/txtp_parser.c. Manipulation of the range_start/range_end arguments leads to resource consumption , resulting in a low availability impact. The attack is remote over t...

CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...

CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...

CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit 此黑盒漏洞利用脚本的主要功能： 1. 凭据暴力破解： 测试 12 种以上常见的默认用户名/密码组合 检查 5 个常见的系统数据库 自动检测有效凭据 2. 匿名访问尝试： 尝试不使用任何凭据进行连接 如果启用了匿名访问，则测试所有数据库 3. 漏洞利用阶段： 使用 150,000+ 层嵌套以达到最大影响 自动检测服务器崩溃症状 测试所有有效的凭据/数据库组合 4. 错误处理： 区分连接错误与成功崩溃 优雅地处理各种 MySQL 错误情况 使用说明： 1. 将 TARGETIP 替换为目标服务器的 IP 地址 2. 安装先决条件：pip...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix 虚拟应用和桌面 XEN 未认证远程代码执行漏洞 查看我们的博客文章了解详细的技术信息。 https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 漏洞利用演示 root@kitploit: python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami" CVE-xxxx-xxxxx.py Citrix 虚拟应用和桌面...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

PX4 军用无人机自动驾驶仪 =1.12.3 栈缓冲区溢出漏洞利用 CVE-2025-5640 作者: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer 日期： 2025-06-21 测试环境： Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE： CVE-2025-5640 类型： 通过栈缓冲区溢出导致的拒绝服务 DoS 平台： 跨平台（军用无人机 / PX4 SITL / 基于 Linux 的自动驾驶仪地面站） 作者国家： 约旦 描述 PX4...

EUVD-2026-72615

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-86514

vgmstream (up to revision r2117) contains a stack-based buffer overflow in the sscanf function within src/meta/txth.c, part of the txth-txtp component. The flaw can be triggered remotely without authentication, though user interaction is required (e.g., opening a crafted file). CVSS 3.1 rates it ...

CVE-2026-86514 vgmstream txth-txtp txth.c sscanf stack-based overflow

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-86514 vgmstream txth-txtp txth.c sscanf stack-based overflow

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-86514 vgmstream txth-txtp txth.c sscanf stack-based overflow

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

D-Link-CVE-2021-27342-exploit

D-Link-CVE-2021-27342-漏洞利用 针对CVE-2021-27342漏洞的利用程序（Telnet认证暴力破解保护绕过）...

CVE-2026-13714

root@kitploit: Realtyna WPL 5.3.0 - Unauthenticated RCE Exploit Description This exploit targets a critical vulnerability in Realtyna Organic IDX + WPL Real Estate plugin versions prior to 5.3.0. The plugin uses hardcoded credentials and allows unauthenticated file upload leading to Remote Code...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

PrintNightmare

Critical Vulnerability PrintNightmare CVE-2021-1675, CVE-2021-34527 Currently no solution from Microsoft yet as of 02.07.2021 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Affects all operating system versions server and client Options Disable Print Spooler Adjust ACL Event...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato for x86 Windows This is a version of ohpe's Juicy Potato privilege escalation exploit modified for x86 Windows. I preserved as much of the code as I could, while making small changes necessary to compile for x86 Windows. Tested successfully on Windows 7 SP1 x86 Build...