FreePBX 17.0.2 - Remote Code Execution (RCE)

Exploit Title: FreePBX 17.0.2 - Remote Code Execution Date: 2026-08-12 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.freepbx.org/ Software Link: https://github.com/FreePBX/freepbx Version: FreePBX 15.x 15.0.66, 16.x 16.0.89, 17.x 17.0.3 Tested on: Linux Debian/Ubuntu with...

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

GHSA-2MW5-23GM-PCCQ OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Summary OpenChoreo Workflow Plane templates were vulnerable to OS command injection because some developer-controlled workflow parameters were interpolated directly into shell program text executed through sh -c. An authenticated user with permission to configure and trigger an affected workflow...

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

GHSA-52GF-6RPQ-FGMX OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

ghostlock — Updated!

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

aigate

aigate Hygiène des secrets pour code généré par IA. Détecte les identifiants codés en dur dans les prompts, les entrées d'outils, le code généré et les fichiers existants. Démarrage rapide root@kitploit: pip install aigate && aigate setup-all C'est tout. Cela installe un proxy en arrière-plan mod...

CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit

CTT-ProxyLogon-RCE-v1.0---Улучшенный эксплойт для Microsoft Exchange на основе Теории сходящегося времени Продвинутый эксплойт для Microsoft Exchange Server CVE-2021-26855, CVE-2021-27065, усиленный принципами Теории сходящегося времени, достигающий почти идеального теоретического рейтинга за счё...

CVE-2025-15260

CVE-2025-15260 : Autorisation manquante / Contrôle d'accès brisé dans le plugin MyRewards – Points de fidélité et récompenses pour WooCommerce Avertissement : Ce dépôt est créé à des fins éducatives et de divulgation éthique uniquement. La vulnérabilité a été signalée de manière responsable au...

CVE-2026-8347 — Updated!

CVE-2026-8347 – Insecure Direct Object Reference IDOR in Concrete CMS Overview CVE-2026-8347 is an Insecure Direct Object Reference IDOR vulnerability affecting Concrete CMS versions 9.5.0 and earlier. The issue exists in the Express Association Reorder functionality due to insufficient...

Undocumented-RCE-in-PLY — Updated!

Undocumented Remote Code Execution in PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...

burp-intruder-payloads

Burp Intruder Payloads You're welcome, hacker! About T...

craftcms-vcard-exploit

Craft CMS vCard 플러그인 역직렬화 취약점 Craft CMS에는 .vcf 파일 형식으로 연락처를 다운로드하기 위한 "vCard"라는 플러그인이 있습니다. 이 플러그인은 Craft 저장소와 Github에서 확인할 수 있습니다: Craft Plugin Store Github 설명 이 플러그인은 클라이언트가 보낸 매개변수를 받아 openssldecrypt로 값을 복호화한 다음, 결과 문자열을 PHP의 unserialize 함수에 전달합니다. 암호화에 사용되는 기본 salt가 저장소에 공개되어 있기 때문에, 공격자는 동일한...

CVE-2026-84452

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452

Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

EUVD-2026-70264

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-22679

CVE-2026-22679: Weaver E-cology Неаутентифицированное удалённое выполнение кода через отладочную конечную точку dubboApi -critical TL;DR Weaver E-cology 10.0 до сборки 20260312 содержит критическую уязвимость неаутентифицированного удалённого выполнения кода в конечной точке...