poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2016-10033

CVE-2016-10033 – Ejecución Remota de Código en PHPMailer 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2016-10033 , una vulnerabilidad en versiones de PHPMailer anteriores a 5.2.18. El problema ocurre cuando el argumento $additionalparameters de la función...

CVE-2024-6387

CVE-2024-6387 una condición de carrera en el manejador de señales del servidor OpenSSH sshd Descripción Un exploit para CVE-2024-6387, que apunta a una condición de carrera en el manejador de señales del servidor OpenSSH sshd en sistemas Linux basados en glibc. La vulnerabilidad permite la...

CVE-2024-38077

CVE-2024-38077 Aquí hay una posible descripción de GitHub para CVE-2024-38077: CVE-2024-38077: Vulnerabilidad de ejecución remota de código en el servicio de licencias de escritorio remoto de Windows Resumen: CVE-2024-38077 es una vulnerabilidad crítica en el Servicio de licencias de escritorio...

cve-2024-0305exp

cve-2024-0305exp cve-2024-0305可用的exp，如需引用请转明出处，感谢！ 0x01 产品背景 Ncast盈可视高清智能录播系统是广州盈可视电子科技有限公司的一款产品。该系统存在RCE漏洞，攻击者可以利用此漏洞执行任意命令能够利用该漏洞获取服务器权限，导致服务器沦陷。 0x02 漏洞范围 Ncast 2007 Ncast 2017 0x03 漏洞寻找 FOFA: app="Ncast-产品" 0x04 使用方法 python cve-2024-0305.py -u YOUR TARGET -p TARGET PORT 注：不带http:// 0x05 其他事项...

WordPress_4.9.8_RCE_POC

摘要 一个针对WordPress RCE（作者权限）的简单PoC，参考CVE-2019-8942和CVE-2019-8943。 受影响版本 WordPress = 4.9.8（已验证） WordPress = 5.0.0 测试环境 Docker 镜像 docker pull avfisherdocker/wordpress:4.9.8 docker run -d -p 80:80 avfisherdocker/wordpress:4.9.8 MySQL 和 WordPress 信息...

CUPS-CVE-2024-47176

CVE-2024-47176 CUPS 漏洞扫描器 一个用于扫描运行 CUPS（通用 Unix 打印系统） 系统的简单工具，检测 CVE-2024-47176 漏洞。该漏洞可通过端口 631 上的 互联网打印协议（IPP） 导致远程代码执行（RCE）。 功能特性 自动化扫描 ：发送精心构造的 UDP 数据包以检测易受攻击的 CUPS 实例。 多线程扫描 ：高效地同时扫描多个 IP 地址。 回调日志记录 ：通过回调服务器记录来自易受攻击系统的响应。 安装 1. 克隆仓库： root@kitploit: git clone...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation, due to insufficient validation of client-controlled size parameters. This allows for out-of-bounds writes via crafted PDUs. Pre-authentication...

Astra Linux – Vulnerability in GIMP

GIMP PNM File Parsing: Integer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a...

Astra Linux – Vulnerability in WebKit2GTK

A use-after-free vulnerability exists in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before version 2.36.8. This vulnerability allows attackers to execute code remotely...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Apache Log4j1.2

The JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration, or when the configuration references an LDAP service to which the attacker has access. The attacker can provide a...

Astra Linux – Vulnerability in Graphviz

A buffer overflow in the Graphviz Graph Visualization Tools, starting from the commit ID f8b9e035 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes.c" component...

Astra Linux – Vulnerability in node-getobject

A vulnerability in the “getobject” version 0.1.0 prototype allows an attacker to cause a denial of service and may lead to remote code execution...

Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI, provided that the attacker has control over the target LDAP server. Thi...

Astra Linux – Vulnerability in GIMP

GIMP DCM File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

Astra Linux – Vulnerability in Chromium

Using “after free” in Ozone in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after-free in TabStrip in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in Media in Google Chrome before version 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in GIMP

GIMP PSD File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...