842389 matches found
CVE-2026-90618 GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection
A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...
EUVD-2026-77177
A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.executecommand of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be...
CVE-2023-4220-HTB-PermX
Chamilo-LMS-CVE-2023-4220-Exploit Descripción Este exploit demuestra una vulnerabilidad de carga de archivos sin restricciones en Chamilo-LMS. La vulnerabilidad afecta la funcionalidad de carga de archivos grandes ubicada en: root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php...
CVE-2026-24061
🚨 CVE-2026-24061 — “TelneTD” GNU Inetutils telnetd 中的严重远程身份验证绕过漏洞 2015 年的幽灵刚刚回来，占有了所有还在运行 telnet 的东西。 零身份验证。一个环境变量。即时 root shell。 ⚠️ 概述 CVE-2026-24061 是 GNU Inetutils telnetd ≤ 2.7 中的一个 严重远程权限提升 漏洞。 未经身份验证的远程攻击者通过 Telnet NEW-ENVIRON 选项将 USER 环境变量设置为 "-f root"。 telnetd 未经任何清理 直接将其传递给 /bin/login →...
HavocPwn
Havoc-PWN Autenticado Esta cadena SSRF-RCE fue inspirada por el POC SSRF de CVE-2024-41570 de chebuya y el Havoc Auth RCE de IncludeSecurity; ambos exploits son increíbles y están muy bien elaborados, ¡por favor den a estos creadores el reconocimiento por su arduo trabajo! chebuya hyperreality...
CVE-2020-13935
Exploit para la vulnerabilidad de WebSocket en Apache Tomcat CVE-2020-13935 En la entrada del blog correspondiente se explica en detalle el análisis y la explotación de la vulnerabilidad. Uso Clona el repositorio y, a continuación, compila el binario tcdos. Ejecuta el programa de la siguiente...
CVE-2026-53519-PoC
CVE-2026-53519 — Path Traversal y falsificación de JWT en Nezha Dashboard English | 繁體中文 | 简体中文 Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad en el Nezha Dashboard que permite path traversal sin autenticación , lo que conduce a la divulgación de archivos...
CVE-2026-90615
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...
CVE-2026-90612
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...
CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90611
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90613
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...
UBUNTU-CVE-2026-90612
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...
UBUNTU-CVE-2026-90611
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90612
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...
CVE-2026-90613
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...
UBUNTU-CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90611
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90617 GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection
A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function runtask of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible ...