CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

CVE-2026-44262

dedoc/scramble RCE CVE-2026-44262 PoC 📜 Descripción CVE-2026-44262 es una vulnerabilidad de Ejecución Remota de Código sin autenticación en dedoc/scramble, un generador de documentación de API de Laravel. NodeRulesEvaluator::doEvaluateExpression llama a extract$variables antes de . Cuando un...

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - inyección de comandos CVE-2019-1010174 Detalle Modificado Esta vulnerabilidad ha sido modificada desde su último análisis por el NVD. Está pendiente de un nuevo análisis que puede dar lugar a cambios adicionales en la información proporcionada. Descripción...

CVE-2024-27304-PoC

CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...

CVE-2025-40677

Exploit Title: Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677 Google Dork: inurl:"/MemberPages/quienesquien.aspx" Date: 09/22/2025 Exploit Author: Peter Gabaldon - https://pgj11.com/ Vendor Homepage: https://www.summar.es/ Software Link:...

CVE-2023-46818

CVE-2023-46818 - ISPConfig PHP Code Execution | Exploit High Remote Code Execution in ISPConfig PoC implementation. Resume ISPConfig versions /admin/languageedit.php — ISPConfig vulnerable endpoint 🚀 Launching the Exploit...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 Command Injection vulnerability in ggit ggit describes itself as: root@kitploit: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

coolify-cve-2025-66209-66213

Coolify Security Advisories - CVE-2025-66209 through CVE-2025-66213 Reporter: 0xrakan Vendor: coollabsio/coolify Affected Versions: v4.0.0-beta.451 Fixed Version: v4.0.0-beta.451 Severity: Critical CVSS 9.4 Overview Five critical authenticated command injection vulnerabilities were discovered in...

CVE-2019-9081_PoC

CVE-2019-9081poc Poc for CVE-2019-9081, this CVE is just a new POP chain. The project is a pre-built vulnerable Laravel 5.7.x application with an entry point for POI vulnerability at URI /deserialize POST-request. Lab setup: Starting the vulnerable application: root@kitploit: $ git clone...

CVE-2023-29007_win-version

CVE-2023-29007win-version original PoC https://github.com/ethiack/CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007...

CVE-2025-48384-test

Línea de comandos para reproducir root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git Modificar el repositorio de GitHub al que apunta root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add...

pyrocms-ssti-fix

🛡️ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

cve-2024-10914

POC - CVE-2024–10914 - Vulnerabilidad de Inyección de Comandos en el parámetro name para D-Link NAS Resumen Se encontró una vulnerabilidad en D-Link DNS-320, DNS-320LW, DNS-325 y DNS-340L hasta la versión 20241028. Se ha declarado como crítica. Esta vulnerabilidad afecta a la función cgiuseradd d...

CVE-2019-9978

CVE-2019-9978 - RCE en el Plugin Social Warfare de WordPress system'cat /etc/passwd' ✅ Paso 2 – Iniciar un Servidor HTTP de Python...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...