cve-2024-38077-madlicense_reproduction

CVE-2024-38077: Remotecodeausführung im Windows-Remotedesktop-Lizenzierungsdienst "MadLicense" I. Schwachstellenübersicht CVE-ID : CVE-2024-38077 Alias : MadLicense CVSS-Score : 9.8 Kritisch Typ : Heap-basierter Pufferüberlauf CWE-122 Entdeckt von : Ver, Lewis Lee, Zhiniang Peng Beschreibung : Ei...

wp2shell-lab

Lab wp2shell e detector + PoC RCE pre-auth Un laboratorio autonomo, detector non distruttivo e proof-of-concept completo di RCE pre-autenticazione per wp2shell — la catena di vulnerabilità pre-autenticazione nel core di WordPress:...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence RCE pre-autenticazione...

CVE-2025-32433-Eploit

CVE-2025-32433-Eploit Erlang/OTP SSH vulnerabile a RCE pre-autenticazione Exploit RCE SSH Erlang Creazione di un payload SSH per eseguire un comando Erlang arbitrario sul server vulnerabile. Utilizzo: root@kitploit: python3 exploit.py -t targets.txt -p 2222 -o results.log Disclaimer: Questo...

CVE-2022-47986

CVE-2022-47986 Aspera Faspex RCE pre-autenticazione https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/ Uso del PoC: root@kitploit: python3 poc.py https://xxxxx whoami...

metabase-pre-auth-rce-poc

POC RCE Pre-Auth di Metabase CVE-2023-38646 Questo è uno script scritto in Python che consente lo sfruttamento della vulnerabilità di sicurezza del software Metabase descritta in CVE-2023-38646. Il sistema è vulnerabile nelle versioni precedenti alla 0.46.6.1 , nell'edizione open-source, e...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: RCE Critica Pre-Autenticazione nei React Server Components Ricerca sulla Sicurezza dischema.cx "Il controllo è un'illusione. Sono i sistemi che costruiamo a controllarci—a meno che non li comprendiamo prima." 📋 Indice Disclaimer & Avviso Legale Sommario Esecutivo Descrizione Tecni...

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...

GHSA-6C99-87FR-6Q7R OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Summary Description A deserialization of untrusted data vulnerability CWE-502 exists in OpenAM's WebAuthn authentication module. Under certain conditions, this may allow an attacker to achieve arbitrary code execution in the context of the application server. This affects OpenAM Community Edition...

Exploit for Embedded Malicious Code in Tukaani Xz

XZ Backdoor Labs CVE-2024-3094 Safe, hands-on labs for...

Exploit for Double Free in Apache Http_Server

CVE-2026-23918 Double-free in Apache httpd modhttp2 stream c...

CVE-2025-34300 Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE

A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...

CISA Emergency Directive 21-03: VPN Vulnerabilities Actively Exploited

On April 20, 2021, the Department of Homeland Security Cybersecurity and Infrastructure Security Agency CISA released an alert on the exploitation of Pulse Connect Secure Vulnerabilities with Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities, as well as Emergency Directive ED...