CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - Confluence RCE pre-autenticación | inyección OGNL Descargar script PoC root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Ejecutar el exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit....

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

watchTowr-vs-SysAid-PreAuth-RCE-Chain

SysAid PreAuth RCE Chain PoC PoC for SysAid PreAuth RCE Chain CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778 See our blog post for technical details https://github.com/user-attachments/assets/03245fab-915d-43b6-8e91-f0a18251af49 PoC in Action root@kitploit: python...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 Una Prueba de Concepto para el encadenamiento de los CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 desarrollada por @watchTowr para lograr Ejecución Remota de Código en Juniper JunOS en productos de las series...

CVE-2024-40711

CVE-2024-40711 Exploit para Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 Vea nuestra publicación en el blog para detalles técnicos https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC en Acción root@kitploit: CVE-2024-40711.exe -f...

CVE-2025-0282

CVE-2025-0282 Desbordamiento de pila TLS IFT en Ivanti Connect Secure pre-autenticación RCE CVE-2025-0282 Este código está intencionadamente roto de maneras no triviales y requerirá esfuerzo para funcionar según lo descrito previamente en nuestra publicación de blog sobre técnicas de explotación...

CVE-2019-0708

Existe una vulnerabilidad de ejecución remota de código en los Servicios de Escritorio Remoto, anteriormente conocidos como Servicios de Terminal, cuando un atacante no autenticado se conecta al sistema objetivo mediante RDP y envía solicitudes especialmente diseñadas. Esta vulnerabilidad es prev...

CVE-2026-53937

MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...

RHEL 9 : glib2 (RHSA-2026:65768)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65768 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

RHEL 8 : glib2 (RHSA-2026:65769)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65769 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

RHEL 8 : glib2 (RHSA-2026:65762)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65762 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

RHEL 10 : glib2 (RHSA-2026:65767)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65767 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

RHEL 7 : glib2 (RHSA-2026:65773)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65773 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd Denegación de Servicio remota sin autenticación - PoC's/info Fuentes: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth Todo el crédito es para j0v y su tweet https://twitter.com/j0v0x0/status/1466845212626542607 Descargo de responsabilidad Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. De buena fe, he retenid...

http-vuln-CVE-2019-16759

RESUMEN Script NSE sencillo para detectar el 0day de RCE pre-autenticación de vBulletin 5.x. Debería funcionar en todas las versiones desde la 5.0.0 hasta la 5.5.4. INSTALACIÓN $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp...

confusploit

Este script encuentra servidores vulnerables a CVE-2022-26134 y puede usarse junto con SHODAN CLI y Bash Scripting One-Liner Úselo solo con fines legales y educativos Ejecución remota de código sin autenticación previa en Confluence mediante inyección OGNL CVE-2022-26134 El 2 de junio de 2022,...

vBulletin-5.x-0day-pre-auth-RCE-exploit

vBulletin-5.x-0day-pre-auth-RCE-exploit Versiones afectadas: vBulletin 5.0.05.5.4 poc a continuación: !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE via Terminal WebSocket root@kitploit: / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Status: Patched in 0.23.0 — marimo-team/marimo@c24d480 Vulnerability The /terminal/ws endpoint lacks the validateauth call present in every other authe...