CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation Questo è un POC che mostra come ottenere una shell bash inversa per l'esecuzione arbitraria di codice su una macchina esterna utilizzando CVE-2022-0847, "Dirty Pipe Exploit". Questa vulnerabilità colpisce solo le versioni del kernel Linux 5.8 o successive, ma ...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Prova di concetto — uid=1000raken → uid=0root dopo ./sley su WSL2 6.6.87.2-microsoft-standard-WSL2 Prova di concetto in un singolo file per CVE-2026-43494 PinTheft: un'escalation dei privilegi locali del kernel Linux che combina un bug di conteggio dei riferimen...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-Concept zur lokalen Privilegienausweitung mittels XFRM/ESP-Seitencache-Korruption 4-Byte-Schreibprimitive · 48 Iterationen · 192-Byte-ELF-Überschreibung · unprivilegierter Benutzer + netns Proof of Concept Links: Kernel-Preflight, setuid-Scan und...

CVE-2019-11581

CVE-2019-11581 Vulnerabilità di template injection in Atlassian JIRA RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Download delle versioni vulnerabili https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc root@kitploit:...

SMBGhost-SMBleed-scanner

SMBGhost CVE-2020-0796 और SMBleed CVE-2020-1206 स्कैनर c 2020 ZecOps, Inc. - https://www.zecops.com - हैकर्स की गलतियाँ खोजें केवल शैक्षिक और कॉर्पोरेट वातावरण में परीक्षण के लिए अभिप्रेत है। ZecOps इस कोड के लिए कोई जिम्मेदारी नहीं लेता, अपने जोखिम पर उपयोग करें। यदि आप सर्वर, एंडपॉइंट और मोबाइल...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — Bypass della validazione dei deep link → Reindirizzamento aperto WebView CVE-2026-26897 Divulgazione pubblica / advisory per CVE-2026-26897 , un bypass della validazione dei deep link nell'applicazione Android EcoOnline EHS com.airsweb.v10. Un deep link ehs-app://...

CVE-2021-4034-PwnKit-

CVE-2021-4034 PwnKit - Analisi e Sfruttamento Questo repository contiene il codice sorgente per dimostrare lo sfruttamento della vulnerabilità CVE-2021-4034 , nota anche come PwnKit , scoperta in pkexec parte del pacchetto Polkit. Questa falla consente un escalation locale dei privilegi a root...

pyrocms-ssti-fix

🛡️ إصلاح ثغرة SSTI في PyroCMS إصلاح أمني فوري لـ CVE-2023-29689 - حقن القوالب من جانب الخادم SSTI يؤدي إلى تنفيذ الأوامر عن بعد RCE في PyroCMS 3.9. المشكلة يسمح PyroCMS للمستخدمين الإداريين بتحرير القوالب المخزنة في قاعدة البيانات. بدون آلية عزل Sandboxing، يمكن للمهاجمين الذين لديهم صلاحيات...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC Una vulnerabilità critica in Microsoft SharePoint Server consente l'esecuzione remota di codice senza autenticazione tramite deserializzazione di dati non attendibili. Microsoft è a conoscenza di uno sfruttamento attivo; applicare immediatamente l...

CVE-2026-49009

CVE-2026-49009 — Mender Server: Path Traversal autenticato verso esecuzione di codice remoto Scoperto da j0xh-sec via HackerOne · PoC di INTELEON404 Indice dei contenuti Riepilogo della vulnerabilità Versioni interessate Analisi tecnica Proof of Concept Exploit in Python Template Nuclei Scanner...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox ist eine fortschrittliche Bedrohungsschutzlösung, die isolierte Umgebungen schafft, um verdächtige Dateien, URLs und Netzwerkverkehr auf schädliches Verhalten zu analysieren...

slicer

Slicer A tool to automate the recon process on an APK file. Slicer accepts a path to an extracted APK file and then returns all the activities, receivers, and services which are exported and have null permissions and can be externally provoked. Note : The APK has to be extracted via jadx or...

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Beliebige Codeausführung durch bösartiges ZScript Ein Proof of Concept für eine Schwachstelle in der ZScript-Funktionalität von GZDoom https://github.com/zdoom/gzdoom, die ich entdeckt habe. Ein Angreifer kann eine PK3-Datei mit einer bösartigen ZScript-Quelldatei teilen und Zugri...

GeoServer <1.2.2 - Remote Code Execution

Programs run on GeoServer before 1.2.2 which use jt-jiffle and allow Jiffle script to be provided via network request are susceptible to remote code execution. The Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects downstream GeoServer 1.1.22. id:...

FreePBX - Remote Code Execution

FreePBX 15, 16, and 17 contain a remote code execution caused by insufficiently sanitized user-supplied data in endpoints, letting unauthenticated attackers manipulate the database and execute code remotely, exploit requires no authentication. id: CVE-2025-57819 info: name: FreePBX - Remote Code...

Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

Sophos UTM Preauth - Remote Code Execution

Sophos SG UTMA WebAdmin is susceptible to a remote code execution vulnerability in versions before v9.705 MR5, v9.607 MR7, and v9.511 MR11. id: CVE-2020-25223 info: name: Sophos UTM Preauth - Remote Code Execution author: gy741 severity: critical description: Sophos SG UTMA WebAdmin is susceptibl...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

rConfig 3.9 - SQL Injection

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. id: CVE-2020-10220 info: name: rConfig 3.9 - SQL Injection author: ritikchaddha,theamanrawat severity: critical description: | An issue was discovered i...

WordPress PHPMailer < 5.2.18 - Remote Code Execution

WordPress PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property in isMail transport. id: CVE-2016-10033 info: name: WordPress PHPMailer 5.2.18 - Remote...