127489 matches found
CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager
CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ā ļø DISCLAIMER ESTA HERRAMIENTA ES EXCLUSIVAMENTE PARA FINES EDUCATIVOS Y DE INVESTIGACIĆN Este exploit estĆ” destinado exclusivamente para operaciones de equipo rojo autorizadas, pruebas de penetraciĆ³n e investigaciĆ³n de seguridad en...
awesome-jenkins-rce-2019
awesome-jenkins-rce-2019 There is no pre-auth RCE in Jenkins since May 2017, but this is the one! It chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution! Affect list ANONYMOUSREAD disable Jenkins version 2.138 ANONYMOUSREAD...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
vivo-root-build
PD2415 6.6.89 Full-Flow Candidate This source is based on the same-device/same-SoC PD2415 6.6.57 IonStack engine: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. The dumpstate carrier closure is retained from the validated PD2241 method. The archived 6.6.89 target keeps...
poc-yaws-dav-xxe
XXE en el servidor web Yaws CVE-2020-24379 Prueba de concepto Construir imagen de prueba: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . y/o Ejecutar el contenedor docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod A continuaciĆ³n, ejecutar: root@kitploit: curl...
CVE-2019-18426
Esto fue publicado originalmente en el Github oficial de la empresa PerimeterX a travĆ©s de mi cuenta de Github de trabajo. Aunque este es mi trabajo, todos los derechos y asuntos legales pertenecen a la empresa PerimeterX. DivulgaciĆ³n de vulnerabilidades de WhatsApp - Open Redirect + Bypass de CS...
CVE-2026-7482-PoC
CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC This repository contains a 1-day Proof of Concept PoC exploitation chain for CVE-2026-7482 , an unauthenticated Out-of-Bounds OOB Read vulnerability in Ollama's GGUF model loader versions prior to 0.17.1. Note: This is a 1-day research...
CVE-2026-26336-PoC
CVE-2026-26336 ā Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...
CVE-2021-21017
CVE-2021-21017 ė ķėģ Adobe Reader ė°ģ“ķø ģģ ķģBOM ė²ź·ø : root@kitploit: IA32 ķė¬ź·øģø, ė²ģ 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 &&...
desc_race-1
descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...
IoRingReadWritePrimitive
IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...
CVE-2021-43798-poc
CVE-2021-43798-poc Grafana8.x Arbitrary File Read python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...
CVE-2026-31431
copy.fail ā AFALG AEAD splice primitive CVE-2026-31431 Overview This project is a C port of the original Python prototype, by offsecguy. It leverages the Linux kernel crypto API AFALG using: authencesnhmacsha256,cbcaes AEAD mode MSGMORE flag splice system call The technique feeds data from a...
CVE-2021-42013
CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install root@kitploit: git clone...
CVE-2021-43798
CVE-2021-43798 Grafana unauthorized arbitrary file reading vulnerability On December 4, 2021, a security researcher revealed an arbitrary file reading vulnerability in Grafana on the Internet. Unauthorized attackers can use this vulnerability to obtain sensitive files on the server. The...
CVE-2026-7482
šØ CVE-2026-7482: Heap Buffer Over-Read in Ollama š Description CVE-2026-7482 identifies a critical heap buffer over-read vulnerability in the /api/create and /api/push endpoints of Ollama , an open-source framework for running local language models. This vulnerability allows a remote,...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read ā Admin Token Forge ā Sandbox Bypass ā RCE Full unauthenticated RCE chain on n8n: 1. CVE-2026-21858 - Content-Type confusion ā Arbitrary File Read 2. Read config + database ā forge admin JWT 3. CVE-2025-68613 -...