CVE-2026-42533

CVE-2026-42533 — PoC Exploit per l'Heap Buffer Overflow di nginx Esecuzione remota di codice pre-autenticazione tramite sovrascrittura dei gruppi di cattura a due passate PoC pubblico rilasciato il 2026-07-27 — Non aspettare, applica la patch ora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Criti...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support पूर्व-प्रमाणीकरण RCE PoC !WARNING यह स्क्रिप्ट केवल शैक्षिक और अनुसंधान प्रयोजनों के लिए है। बिना स्पष्ट अनुमति के सिस्टम के विरुद्ध इसका उपयोग न करें। अनधिकृत पहुंच या परीक्षण अवैध और अनैतिक है। इस स्क्रिप्ट का उपयोग करने से पहले पूर्ण अस्वीकरण पढ़ें।...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन का प्रदर्शन root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Framework-Toolkit di Exploit per il Bypass dell'Autenticazione SAML di Oracle WebLogic Server Oracle WebLogic — Bypass dell'Autenticazione SAML → Acquisizione dei Privilegi di Amministratore Framework di Exploit e Scanner di Massa Solo per test di sicurezza autorizzati. ⚖️...

CVE-2026-23918

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream cleanup leading to pre-auth RCE. Betroffen: httpd 2.4.66 mit modhttp2 und mehrthreadigem MPM event/worker. Behoben in: 2.4.67. Gefunden und gemeldet von Bartlomiej Dmitruk striga.ai und Stanislaw Strzalkowski isec.pl. Writeup:...

CVE-2026-35616-check

Strumento di valutazione della vulnerabilità CVE-2026-35616 Rileva in sicurezza se un server FortiClient EMS è vulnerabile a CVE-2026-35616 senza causare alcuna interruzione. Consulta l'analisi completa sul blog di Bishop Fox. Descrizione CVE-2026-35616 è un bypass API pre-autenticazione in...

CVE-2026-39987

⚠️ CVE-2026-39987 — Nicht authentifizierte Shell in marimo 0.23.0 Ein reaktives Python-Notebook-Tool verschaffte Angreifern in einer einzigen WebSocket-Anfrage eine vollständige Shell. 📌 Überblick CVE-2026-39987 ist eine kritische RCE-Schwachstelle vor der Authentifizierung in marimo — einem...

CVE-2023-38646

CVE-2023-38646 Python-Skript zur Ausnutzung von CVE-2023-38646 Metabase Pre-Auth RCE über SQL-Injection Das Skript ruft GET /api/session/properties ab, um das Setup-Token zu erhalten und die Ausnutzbarkeit des Ziels zu bewerten. Wenn es verwundbar ist, wird dann das Setup-Token ausgegeben,...

CVE-2023-24488-SIEM-Sigma-Rule

Regola Sigma: Rilevamento di XSS Pre-Auth CVE-2023-24488 Rileva i tentativi di sfruttamento della vulnerabilità XSS Pre-Auth CVE-2023-24488 di Citrix Gateway. Questa regola Sigma cerca pattern di attacco XSS nel parametro di query postlogoutredirecturi. Descrizione della Regola La regola Sigma...

ALPINE-CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2023-29357

Recriação do PoC do SharePoint para CVE-2023-29357 em C com muita ajuda do ChatGPT. Compilado com .Net Version 4.7.2 no Visual Studio 2017 Use o Gerenciador de Pacotes NuGet para instalar quaisquer pacotes ausentes Regras Yara para detecção abaixo Usage: root@kitploit: CVE-2023-29357.exe...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2024-50526, eine nicht authentifizierte Schwachstelle zum beliebigen Hochladen von Dateien im WordPress-Plugin Multi...

0-click-RCE-Exploit-for-CVE-2024-50498

CVE-2024-50498 / 0-क्लिक RCE एक्सप्लॉइट लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1858512517774868845 यह रिपॉजिटरी CVE-2024-50498 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है, जो LUBUS WP Query Console WordPress प्लगइन में एक अनऑथेंटिकेटेड कोड इंजेक्शन भेद्यता है, जो रिमोट कमांड...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

CVE-2025-55182

CVE-2025-55182: React2Shell - Toolkit für Remote-Codeausführung in Next.js !WARNING Dieses Werkzeug wird nur für autorisierte Tests und Bildungszwecke bereitgestellt. Unautorisierter Netzwerkzugriff und Datenextraktion sind illegal. Die Benutzer sind dafür verantwortlich, dass sie vor der Nutzung...

lab-cve-2020-0610

CVE-2020-0610 Laboratorio BlueGate - Windows RD Gateway UDP/DTLS RCE PR Nuclei: https://github.com/projectdiscovery/nuclei-templates/pull/13076 Un ambiente di laboratorio riproducibile e completo per CVE-2020-0610 BlueGate, una vulnerabilità critica di esecuzione remota di codice pre-autenticazio...

CVE-2023-38646

CVE-2023-38646 Metabase RCE pre-autenticazione 11/26/2023 Le versioni di Metabase open source precedenti alla 0.46.6.1 e di Metabase Enterprise precedenti alla 1.46.6.1 consentono agli aggressori di eseguire comandi arbitrari sul server, al livello di privilegio del server. Per lo sfruttamento no...

CVE-2024-57376

CVE-2024-57376 Exploit di esecuzione remota di codice pre-autenticazione per D-Link DSR-250 e DSR-250N Avviso di sicurezza: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Utilizzo root@kitploit: $ python3 exploit.py usage: Esempio root@kitploit: $ python3...

CyberPanel-RCE

CyberPanel-RCE Exploit für die in CyberPanel v2.3.6 gefundene RCE Weitere Informationen auf meinem Blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - RCE pre-autenticazione Confluence | Iniezione OGNL Scarica lo script PoC root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Esegui l'exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.p...