CVE-2026-4480-PoC

CVE-2026-4480: PoC de injeção de print-command %J no Samba Importante — Leia isto primeiro: Este repositório e o exploit.py são fornecidos apenas para fins educacionais e de pesquisa. Não use este código contra sistemas, redes ou serviços para os quais você não tenha autorização explícita e por...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Iniezione di comandi nel nome del lavoro di stampa di Samba Panoramica CVE-2026-4480 è una vulnerabilità di iniezione di comandi che colpisce alcune configurazioni di stampa di Samba che utilizzano comandi di stampa esterni. La vulnerabilità esiste perché Samba...

CVE-2015-6668

CVE-2015-6668 Название: Раскрытие имен файлов CV в плагине Job-Manager WP Plugin...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 تصعيد صلاحيات RCE ومسؤول النطاق لـ Mailcow. يمكن تعديل POC لـ CVE-2022-31245 للعمل مع هذه الثغرة. تم الإبلاغ والإصلاح: 2022-06 حقن الكود، RCE النوع: حقن الكود CWE-94، RCE، السيطرة على النطاق الإصدارات المتأثرة: من 2019 حتى 2022-06a يوجد عيب في جميع إصدارات Mailcow الحديثة ح...

CVE-2026-4480

🚨 CVE-2026-4480 - Samba प्रिंटिंग उपतंत्र में गंभीर रिमोट कोड निष्पादन रिमोट कोड निष्पादन RCE Samba प्रिंट कमांड इंजेक्शन भेद्यता "एक प्रिंट जॉब का नाम कभी शेल कमांड नहीं बनना चाहिए।" 📖 अवलोकन CVE-2026-4480 एक गंभीर कमांड इंजेक्शन भेद्यता है जो Samba के प्रिंटिंग उपतंत्र को प्रभावित करती है।...

CVE-2022-39952

CVE-2022-39952 POC per CVE-2022-39952 che colpisce Fortinet FortiNAC La configurazione predefinita di questo exploit scrive un cron job per creare una reverse shell. Assicurati di modificare il file payload per adattarlo al tuo ambiente. Analisi Tecnica Un'analisi tecnica della causa principale...

CVE-2026-77801

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

CVE-2026-15387

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy...

CVE-2026-15387

GitLab EE is affected by an acceptance of extraneous untrusted data with trusted data issue in versions 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 . The root cause is improper handling of job dependencies , which allows an authenticated user with developer-role permissions to ...

EUVD-2026-66429

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy...

CVE-2026-15387 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy...

CVE-2023-31443

CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Descrizione suggerita NorduGrid nordugrid-arc-wn 6.14.0 contiene il binario SUID arc-job-cgroup che è vulnerabile a un attacco di path traversal. In combinazione con una condizione di gara, l'attaccante può scrivere il ppid in qualsiasi file purché ...

xuxueli__xxl-job_CVE-2020-29204_2-2-0

root@kitploit: XXL-JOB XXL-JOB, un framework distribuito per la pianificazione dei task. -- Pagina iniziale --...

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installationen von Ansible Tower unter bestimmten Rhel-7/8-Konfigurationen sind potenziell anfällig für „Job Isolation“-Escapes, die einem Angreifer ermöglichen, von außerhalb der isolierten Umgebung zum Benutzer „awx“ aufzusteigen. Die folgenden...

xxl-job

RCE tramite accesso non autorizzato all'API RESTful dell'executor xxl-job Utilizzando la console dei log di esecuzione è possibile ottenere l'esito dei comandi eseguiti: Esempio: /joblog/logDetailPage?id=xxxx Visualizzare le variabili d'ambiente JDK root@kitploit: String var3 =...

CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauthentifizierte PHP-Objektinjektion 🎥 Proof-of-Concept-Demo Ende-zu-Ende: Ein Gast speichert über das öffentliche Bewerbungsformular ein serialisiertes PHP-Objekt, der Administrator öffnet die Bewerberliste, und die Gadget-Kette legt eine...

CVE-2026-26718

Descrizione Riepilogo Una vulnerabilità di Cross-Site Request Forgery CSRF esiste nell'applicazione web xxl-job-admin che consente a un utente malintenzionato di effettuare modifiche non autorizzate agli script shell di Glue IDE. L'endpoint interessato manca di una corretta validazione del token...

CVE-2026-4480

must start with the translated line.bash esegui exploit: root@kitploit: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Recepti...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR Ein kleines Rust-CLI, das das mit CVE-2015-6668 Job Manager //filename.ext. Angriffsmuster: Brute-Force / Aufzählen gängiger Jahres-/Monatsordner und Dateinamensvarianten, um zugängliche Dateien zu finden. Indikatoren: HTTP-200-Antworten auf konstruierte URLs weis...

Quartz-1

Zum Kompilieren: % mvn install -DskipTests Hinweis: a. Das endgültige Quartz-JAR befindet sich unter quartz/target b. Falls Sie nicht über Oracle- und/oder Weblogic-Drittanbieter-Bibliotheken JARs verfügen, die für die Kompilierung erforderlich sind diese können aufgrund von Lizenzbestimmungen...