603841 matches found
libwebp-checker
中文 | EN CVE-2023-4863 libwebp dependency check tools This tool checks if your server's application or process that is affected by CVE-2023-4863 libwebp Heap buffer overflow Version above 0.5.0. Run this script in your production environment carefully. Result Screen Shot Scan Result Table of...
CiscoRV320Dump
CiscoRV320Dump Exploits CVE-2019-1653/CVE-2019-1652 para volcar configuraciones de Cisco RV320 y obtener RCE Implementaciones de los exploits CVE-2019-1652 y CVE-2019-1653 divulgados por Red Team Pentesting GmbH. Solo probé estos en un RV320, pero según el aviso de Cisco, el RV325 también es...
CVE-2026-43499-RMX5200
CVE-2026-43499 for realme RMX5200 CVE-2026-43499 local privilege escalation SO for: Item| Value ---|--- Device| realme RMX5200 / RE6030L1 Android| 16 Kernel| 6.12.23-android16-5-gb2a876903b49-ab14541642-4k Fingerprint| realme/RMX5200/RE6030L1:16/BP2A.250605.015/...:user/release-keys Prebuilt...
CVE-2026-56164-EXP
Microsoft SharePoint Server Elevation of Privilege - CVE-2026-56164 Functional unauthenticated EOP exploit. Overview Missing authentication for critical function CWE-306 in SharePoint Server user profile and site collection endpoints. Allows remote attackers to escalate from anonymous to Site...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono
Summary IBM App Connect Enterprise Runtime is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono. Vulnerability Details CVEID:CVE-2026-59868 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yam...
GiveMeKernel
GiveMeKernel This repository contains a condensed and optimized proof-of-concept PoC exploit for CVE-2024-35250. The code is based on Varwara's original release PoC. Disclaimer: This PoC is for educational and research purposes only. Use it responsibly and only on systems you own or have explicit...
ghostlock-s26
GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...
c-CVE-2024-0044
CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...
Exploit for CVE-2026-11991
CVE-2026-11991 — FlowForms Unauthorized Form Publication...
CVE-2023-27524
CVE-2023-27524 Configuración predeterminada insegura en Apache Superset conduce a ejecución remota de código Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Comenzar con root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-27524 $ cd CVE-2023-27524 $ pip/pip3 install ...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2024-28999
CVE-2024-28999 Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console login page Technical Details:...
CVE-2024-22145
CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorización faltante para la actualización arbitraria de opciones Suscriptor+ Descripción: El complemento InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de...
CVE-2021-44967
CVE-2021-44967 root@kitploit: Exploit Title: LimeSurvey 5.2.4 - Authenticated Remote Code Execution RCE Google Dork: inurl:limesurvey/index.php/admin/authentication/sa/login Date: 05/12/2021 Discovered by: Y1LD1R1M Exploit Author: D3Ext Vendor Homepage: https://www.limesurvey.org/ Software Link:...
CVE-2026-40345
deepmerge-ts mergeleft.self, right.self - mergeleft.self, right.self - mergeleft.self, right.self - RangeError: Maximum call stack size exceeded 当 deepmergeInto、deepmergeCustom 和 deepmergeIntoCustom 收到同类图时，也会出现相同的行为。 本地复现 在 package.json 中，该包被固定到受影响的 7.1.6 版本。 root@kitploit: npm install npm run po...
CVE-2026-27771
CVE-2026-27771 — Gitea Container Registry Auth Bypass CVSS: N/A unpublished Affects: Gitea Disclaimer: This proof-of-concept is provided for educational and authorized security research purposes only. Unauthorized access to computer systems is illegal. The authors are not responsible for any misu...
CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back
🧠 CVE-2025-54794: Secuestrando Claude AI con una Inyección de Prompt – El Jailbreak que Respondió Por Aditya Bhatt | Especialista en Seguridad Ofensiva | Operador de Red Team | Adicto a VAPT ⚔️ Introducción: Cuando tu IA Puede Ser Hackeada con Palabras En una era donde los modelos de lenguaje se...
CVE-2025-55182
CVE-2025-55182 - React & Next.js Server Actions RCE Exploit Full-featured Remote Code Execution exploit and scanner for CVE-2025-55182 in React/Next.js Server Actions. Original PoC: Spritualkb/CVE-2025-55182-exp Overview CVE-2025-55182 is a critical prototype pollution vulnerability in React Serv...
LocalPotato_CVE-2023-21746
A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...