CVE-2024-29375

CSV-Injection-PoC CSV-Injection in Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Auswirkungsbewertung: 5.3, Ausnutzbarkeitsbewertung: 1.3 Betroffene Komponenten: Projektbeschreibung, Identifikatoren, Name des benutzerdefinierten Dreiecks innerhalb von Eingabedreiecken u...

wp2shell

wp2shell Execução remota de código pré-autenticação para WordPress 6.9.0–6.9.4 e 7.0.0–7.0.1. Encadeia o CVE-2026-63030 confusão de rota em lote com SQLi com o CVE-2026-60137 reentrada de changeset do customizer para obter criação de administrador não autenticado e execução de comandos no sistema...

CVE-2021-27928

Informationen root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep...

CVE-2021-27928

CVE-2021-27928 In diesem Repository finden Sie einen Proof of Concept zur Ausnutzung der Sicherheitslücke CVE-2021-27928 mittels eines Docker-Containers. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec...

CVE-2026-63077

Visão geral • Fluxo visual • Requisitos • Uso • Limitações • Mitigação !CAUTION Este PoC executa um comando do sistema operacional e pode modificar o diretório da aplicação TeamCity. Utilize-o apenas em um laboratório isolado ou em sistemas para os quais você tenha autorização explícita por...

CVE-2022-40635

CVE-2022-40635: Bypass de Sandbox Groovy no CrafterCMS A vulnerabilidade de Controle Impróprio de Recursos de Código Gerenciados Dinamicamente no Crafter Studio do Crafter CMS permite que desenvolvedores autenticados executem comandos do sistema operacional por meio de um Bypass de Sandbox Groovy...

CVE_2024_20356

CVE-2024-20356 यह CVE-2024-20356 के लिए एक प्रूफ ऑफ कॉन्सेप्ट है, जो Cisco के CIMC में एक कमांड इंजेक्शन भेद्यता है। Aaron द्वारा लिखित और SherllyNeo द्वारा ऑक्सिडाइज़ किया गया। पूर्ण तकनीकी विवरण यहाँ पाया जा सकता है:...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of Concept Exploit RCE in Apache HugeGraph Server Nicht authentifizierte Benutzer können über Groovy-Injektion im Apache HugeGraph Server Betriebssystembefehle ausführen. Verwendung 🛠 Mehrere Ziele ausnutzen ☣️ root@kitploit: python3 CVE-2024-27348.py -f...

CVE-2025-56803

CVE-2025-56803 OS-Befehlsinjektions-Schwachstelle durch Plugin-Ausführung in der Figma-Desktop-Anwendung 1. Überblick Anwendung : Figma Desktop-Anwendung Version : 125.6.5 Anbieter : Figma, Inc. CWE : CWE-78: Unzureichende Neutralisierung spezieller Elemente in einem OS-Befehl „OS Command...

CVE-2019-9193-Home-Lab

ENGLISCHE VERSION CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Dieses Labor simuliert CVE-2019-9193 , eine Schwachstelle in PostgreSQL 9.3–11.2, die folgendes ermöglicht: root@kitploit: COPY ... FROM PROGRAM '' zur Ausführung von OS-Befehlen durch einen Superuser oder eine Rolle mit...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

EUVD-2026-65008

AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backendconfig property in backend/src/Entity/Station.php is annotated with GROUPGENERAL, and PUT /api/station/stationid/profile/edit in...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust रिमोट सपोर्ट और PRA प्री-ऑथ RCE परिचय BeyondTrust रिमोट सपोर्ट और प्रिविलेज्ड रिमोट एक्सेस में क्रिटिकल प्री-ऑथेंटिकेशन RCE। बिना प्रमाणीकरण के दूरस्थ हमलावर OS कमांड निष्पादित कर सकता है।...

CVE-2026-55769

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning searchpath in fillDefaultParameters in pkg/management/postgres/pool/profiles.go. A role holding DATABASE OWNER...

CVE-2026-55765

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword in pkg/management/postgres/utils/roles.go and...

EUVD-2026-62900

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the editmanagerxml capability could write a malicious Splunk Web Manager Extensible Markup Language XML configuration. When the same user opens the affected Splunk Web Manag...

CVE-2026-76335

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the editmanagerxml capability could write a malicious Splunk Web Manager Extensible Markup Language XML configuration. When the same user opens the affected Splunk Web Manag...

CVE-2026-76335

CVE-2026-76335 is a remote code execution vulnerability in Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . An authenticated user without the edit_manager_xml capability can write a malicious Splunk Web Manager XML configuration . When the same user opens the affected page, S...

CVE-2026-75917

SiYuan before v3.7.4 contains an XSS-to-RCE vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/movePathTo()). Document metadata fields (bookmark, alias, memo, alternate name) are concatenated into the aria-label HTML attribute without escaping, a...

PT-2026-78762

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An authenticated user lacking the edit manager xml capabili...