CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 Una vulnerabilità di esecuzione remota di codice è stata trovata in Samba. Un client samba autenticato malintenzionato, con accesso in scrittura alla condivisione samba, potrebbe utilizzare questa vulnerabilità per eseguire codice arbitrario come root...

CVE-2026-76034

A flaw was found in Chromium's WebGL component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox, allowing the attacker to gain control over the affected syste...

CVE-2026-76047

A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

Vulnerabilities found in Oracle Communications

Oracle has identified vulnerabilities in various communication modules, including Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search, and Oracle Communications Unified Inventory Management. These vulnerabilities include stack-based buffer overflows,...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...

CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...

OHTS

OHTS CVE-2017-8759 | Sicherheitslücke im .NET Framework bei der Remotecodeausführung 1. Einleitung Eine Sicherheitslücke bei der Remotecodeausführung besteht, wenn Microsoft .NET Framework nicht vertrauenswürdige Eingaben verarbeitet. Ein Angreifer, der diese Sicherheitslücke in Software, die das...

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

Dieses Repository hat keine README-Datei...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Este é um exploit do CVE-2019-16278 para Nostromo 1.9.6 RCE. Este exploit permite RCE na máquina vítima. Requisitos optparse socat sys Uso Você pode usar o exploit da seguinte forma: root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80...

CVE-2020-11108-PoC

CVE-2020-11108-PoC इस रिपॉजिटरी में दो PoCs हैं। cve-2020-11108-rce.py आपको www-data उपयोगकर्ता के रूप में एक शेल देगा। root-cve-2020-11108-rce.py आपको एक शेल देगा और विशेषाधिकारों को root तक बढ़ाएगा। नोट: यह विनाशकारी है क्योंकि हमें teleporter.php को ओवरराइट करना होगा। पूर्ण विवरण/राइटअप के लिए...

CVE-2021-32305-websvn-2.6.0

CVE-2021-3205-websvn-2.6.0 Dies ist ein Exploit für CVE-2021-3205, eine Websicherheitslücke zur Befehlseinschleusung im search.php-Pfad. Dieser Exploit ermöglicht die Ausführung von Befehlen. Anforderungen optparse, signal, requests Verwendung root@kitploit: ❯ python3 CVE-2021-3205.py --url...

BIT-POSTGRESQL-2026-14680 PostgreSQL type confusion via "internal" arguments

Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type "internal" represents a class of mutually-incompatible data structures not intended for...

MOODLE-3.X-Remote-Code-Execution

MOODLE-3.X-Remote-Code-Ausführung cve-2018-1133 moodle authentifiziert als Lehrer Remote-Code-Ausführung...

WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by dutafi in WordPress Plugin JetEngine versions = 3.8.14...

GHSA-F3QQ-49M6-RW8F

creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...

CVE-2026-76040

A flaw was found in chromium-browser. This use-after-free vulnerability allows a remote attacker, through social engineering, to execute arbitrary code outside of the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected system...

CVE-2026-45135

A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit Este exploit é uma vulnerabilidade de execução remota de código no Ruby-on-Rails ao usar render em dados fornecidos pelo usuário. Está escrito em python3, e lembre-se de instalar a biblioteca requests. aqui está o comando. root@kitploit: pip3 install requests...

MAL-2026-14268 Malicious code in no-for-of-loops (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08feaf6617a902e503390720b41d226364ba3bc125d298eb296a2d3e30d5b6d5 package.json declares no-for-of-loops as its own dependency and devDependency, with the source pointed at http://pack.nppacks.com/npm/no-for-of-loops...