WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution RCE...

-CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...

dockerevil

dockerevil Un repositorio simple para almacenar mis fallas de seguridad en la tecnología docker 2016 - 2017 Escalada de Privilegios en la API de DockerLPE/RPE Escalar desde servidor sin conexión/imágenes mínimas/construir desde Dockerfile TAR Escalada de Privilegios de SUDO en Docker PoC Scripts ...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Ejecución remota de código no autenticada Usa Python 3 Ejecución sin Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Ejecución con Docke...

chakra-exploit-framework

Framework de explotación de Chakra Este repositorio contiene el framework de explotación de navegadores que escribí para prepararme para mi curso EXP-401. El framework está dirigido al motor Chakra, que formó parte de Edge hasta su migración a v8 en 2019. La vulnerabilidad de demostración utiliza...

CVE-2024-31982

CVE-2024-31982 SSTI en Java - Conduce a RCE async async=falsegroovyprintln"Successful Injection"/groovy/ GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F...

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation. The vulnerabilities are listed below - CVE-2026-88771 CVSS score: 9.5 - ...

CVE-2024-23692

Vulnerabilidad CVE-2024-23692 en Rejetto HFS HTTP File Server Resumen Rejetto HFS HTTP File Server es un servidor simple de archivos web que facilita el intercambio de archivos a través de una red o internet. A pesar de su facilidad de uso y simplicidad, se ha descubierto una vulnerabilidad críti...

CVE-2025-56819

CVE-2025-56819 Un problema en Datart v.1.0.0-rc.3 permite a un atacante remoto ejecutar código arbitrario mediante el parámetro de conexión INIT. POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type":...

CVE-2021-30461

Productos afectados VoIPmonitor 24.60 Cómo ejecutar RCE python3 CVE-2021-30461.py -t ipaddress Shell en el navegador: http://x.x.x.x/namrlblgel.php?a=whoami Referencia https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

Oracle-Identity-Manager-CVE-2025-61757

Herramienta de detección de vulnerabilidades CVE-2025-61757 para Oracle Identity Manager v2.2 🔥 Contexto de la vulnerabilidad Recientemente, Oracle Identity Manager ha revelado una grave vulnerabilidad de ejecución remota de código CVE-2025-61757. Esta vulnerabilidad se debe a un manejo inadecuad...

CVE-2026-6279.py

Description This Python script is an exploit tool for CVE-2026-6279 targeting Avada Builder = 3.15.2. Key behavior: scans targets for fusionloadnonce via Avada-specific shortcode/page patterns discovers AJAX endpoint and origin IP bypass if Cloudflare blocks admin-ajax builds exploit requests for...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Usage : python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2024-42448-RCE

CVE-2024-42448-RCE Ejecución remota de código en Veeam Service Provider Console VSPC. Enlace de descarga aquí Detalles: es una vulnerabilidad crítica identificada en Veeam Service Provider Console VSPC con una puntuación CVSS de 9.9. Esta vulnerabilidad permite la ejecución remota de código RCE...