CVE-2024-9441

CVE-2024-9441 脆弱性の説明: このコードは、PHPベースのWebアプリケーションにおける不適切な入力サニタイズに起因するリモートコード実行（RCE）脆弱性を悪用します。具体的な脆弱性は「パスワードリセット」機能（index.php?c=user&m=forgotpassword）にあり、ユーザー入力が適切にサニタイズされないため、攻撃者が任意のPHPコードをサーバーに注入することが可能です。 このスクリプトは、PHPベースのアプリケーションの脆弱性を悪用して、悪意のあるPHPスクリプトをサーバーにアップロードし、HTTPリクエスト経由でシステムコマンドを実行します。 使用手...

CVE-2022-21587-Oracle-EBS-

运行此漏洞利用程序的前提条件： python3 包含模块（requests、os、sys、slipit） uuencode 在运行之前，请确保仅将其用于符合道德的用途。 如果漏洞利用程序运行失败： 请确保你已经安装了前置依赖模块 安装 requests pip3 install requests 安装 slipit，git clone https://github.com/usdAG/slipit cd slipit python3 setup.py sdist pip3 install --user dist/ OR python3 -m pip install --user dist...

Security update for yast2-samba-client

This update for yast2-samba-client fixes the following issue: Update to version 3.1.25. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUS...

Security update for yast2-samba-client

This update for yast2-samba-client fixes the following issue: Update to version 4.4.5. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...

Security update for yast2-samba-client

This update for yast2-samba-client fixes the following issue: Update to version 4.5.4. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...

tar: tar: Hidden file injection via crafted archives

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files...

Moderate: Red Hat Security Advisory: tar security, bug fix, and enhancement update

An update for tar is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2024-9796

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - 인증되지 않은 SQL 인젝션 설명 PoC SQL 인젝션은 WordPress 사용자와 해시를 덤프합니다. 면책 조항: 이 스크립트는 교육 목적으로만 사용됩니다. 불법적인 목적으로 사용하지 마십시오. 만약 사용한다면 전적으로 귀하의 책임이며, 저는 오용에 대해 책임을 지지 않습니다. 익스플로잇에 대한 자세한 정보 https://wpscan.com/vulnerability/2ddd6839-6bcb-4bb8-97e0-1516b8c2b99b/ 사용법:...

Security update for yast2-samba-client

This update for yast2-samba-client fixes the following issue: Update to version 4.6.2. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...

CVE-2020-35846

Cockpit CMS NoSQL注入到远程代码执行：CVE-2020-35846 描述 Cockpit CMS 存在一些 NoSQL 漏洞，可用于转储用户信息。这些信息泄露可以组合起来更改用户密码，进而导致服务器上的远程代码执行。 所有这些漏洞的简要描述可以在此处找到。 用法 root@kitploit: ┌─0z09e─/project/CVE-2020-35846 └──╼ $ python3 exploit.py --help usage: exploit.py -h --dumpall URL . \ \ | | ||/ | \ \ \ / / \ / / / | |/ /...

Security update for yast2-samba-client

This update for yast2-samba-client fixes the following issue: Update to version 4.7.2. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC このPoCは教育および研究目的のみで提供されます。 作者は、このコードの誤用またはそれによって生じた損害について一切の責任を負いません。 このPowerShellスクリプトは、CVE-2013-3900で説明されている攻撃をシミュレートするためのテストツールです。...

CVE-2025-24893

CVE-2025-24893 root@kitploit: Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-2489...

CVE-2024-46982

Next.js キャッシュポイズニングエクスプロイト このツールは、Next.js におけるキャッシュポイズニングの脆弱性 CVE-2024-46982 の検出と悪用を自動化します。この脆弱性では、Server-Side Rendering SSR のレスポンスが Static Site Generation SSG として誤ってキャッシュされる 可能性があります。この設定ミスにより、Stored XSS、DoS、データ漏えい が引き起こされ、攻撃者がキャッシュされたレスポンスに悪意のあるコンテンツを注入できるようになります。 インストールと使用方法 ターゲットリストを準備する...

CVE-2026-82702

CVE-2026-82702 affects the Edimax BR-6214K router running firmware 1.40 . The vulnerability is an OS command injection in the system function within the file www/wlanMP.asp (component asp_WlanMP Endpoint), triggered by manipulation of the ateFunc argument. The attack can be launched remotely but ...

EUVD-2026-68595

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

wp2shell-poc

wp2shell 💙 プロジェクトのサポート 私の作業を評価していただける場合、USDT（TRC20）: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN でプロジェクトのサポートを検討してください。 WordPress Core 事前認証 RCE チェーン wp2shell は、WordPress Core の事前認証脆弱性チェーンを組み合わせたセキュリティ研究用の概念実証（Proof-of-Concept）です： CVE-2026-63030 — REST API バッチルートの混乱 CVE-2026-60137 — WPQuery SQL インジェクション...

CVE-2023-5204

CVE-2023-5204 AI ChatBot = 5.0.12 AND time-based blind query SLEEP Payload: action=wpbosearchresponse&name=test&keyword=test&strid=1 AND SELECT 1436 FROM SELECTSLEEP5kZil Type: UNION query Title: Generic UNION...

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. 脆弱性の説明...

CVE-2024-30270-PoC

이 스크립트는 크로스 사이트 스크립팅XSS과 원격 코드 실행RCE을 이용하여 Mailcow 인스턴스의 취약점을 악용하도록 설계되었습니다. 스크립트는 다음을 목표로 합니다: Mailcow 웹 인터페이스에 XSS 페이로드 주입. XSS 페이로드를 사용하여 승인되지 않은 작업 실행. 서버 템플릿을 덮어쓰고 명령을 실행하여 RCE 달성. 요구 사항 1. Python 3: 컴퓨터에 Python 3이 설치되어 있는지 확인하세요. 공식 웹사이트https://www.python.org/downloads/에서 다운로드할 수 있습니다. 2...