CVE-2026-77136

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2025-55182-realistic-poc

CVE-2025-55182: React Server Components RCE Ein minimaler Proof of Concept, der die kritische Remote-Code-Ausführungs-Sicherheitslücke in [email protected] demonstriert. Was ist CVE-2025-55182? Eine Pre-Authentication-RCE-Sicherheitslücke in React Server Components, die es Angreifern...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 طريقة التشغيل؟ root@kitploit: php log4j.php https://1337.com المتطلبات PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite أو استخدم dnslog.cn قائمة الحمولات Payload root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId...

cve-2019-6340-bits

cve-2019-6340-bits Bit generati durante l'analisi di CVE-2019-6340 Drupal RESTful RCE regola modsec pcap esempio di configurazione nginx log di esempio playbook di esempio...

PaperCut-Authentication_Bypass_and_RCE

CVE-2023-27350 — Bypass di Autenticazione e RCE su PaperCut NG/MF Exploit Python standalone per la vulnerabilità critica di bypass dell'autenticazione e esecuzione remota di codice in PaperCut NG/MF. CVSS 9.8. Descrizione CVE-2023-27350 colpisce PaperCut NG e MF nelle versioni precedenti a 20.1.7...

IPFire_2.25_RCE_Authenticated

IPFire 2.25 Remote Code Execution Authenticated - CVE-2021-33393 Questo exploit si basa su CVE-2021-33393 https://nvd.nist.gov/vuln/detail/CVE-2021-33393 ed è stato sviluppato a partire dall'exploit originale di Mücahit Saratar https://github.com/KaanaryOverFlow/ipfire-2-25-auth-rce, estendendolo...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: un servizio Web mainstream trasformato in un vettore di attacco per esecuzione remota di codice...

CVE-2019-9193

EN GenPostgresRCEExploit è uno strumento PoC progettato per sfruttare una vulnerabilità autenticata di esecuzione remota del codice RCE in alcune versioni di PostgreSQL 9.3 - 11.7. Consente agli utenti autenticati di eseguire comandi di sistema su un server di database PostgreSQL vulnerabile a...

CVE-2023-22527

CVE-2023-22527 - Vulnerabilità RCE Remote Code Execution in Confluence Data Center e Confluence Server PoC Rilevamento nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell Questo script dimostra come sfruttare la vulnerabilità CVE-2024-32002 per ottenere una reverse shell, fornendo accesso remoto al sistema affetto. Usatelo con cautela in ambienti controllati e solo a scopo educativo o di test di sicurezza. Pubblicazione del Blog Questo...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2026-77136

CVE-2026-77136 is a Server-Side Template Injection (SSTI) in the TYPO3 extension powermail (in2code). The raw value of a form field configured as the sender name is passed directly into a Fluid template without sanitization, allowing an unauthenticated user to inject Fluid template syntax and exe...

EUVD-2026-65340

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2026-77138

CVE-2026-77138 affects the TYPO3 extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) . The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safe processing, enabling PHP Object Injection . A remote, unauthenticated attacker can supply a ...

CVE-2026-77138 Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...

EUVD-2026-65338

The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...

mcp-pwn

CVE-2026-23744 — Esecuzione Remota di Codice non Autenticata in MCPJam Riepilogo MCPJam è un ispettore e proxy MCP Model Context Protocol open-source utilizzato per connettere, gestire il debug e amministrare server MCP. Le versioni = 1.4.2 espongono l'endpoint /api/mcp/connect senza autenticazio...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Zusammenfassung FreePBX ist die Open-Source-Web-GUI für Asterisk PBX, die in Unternehmens-Telefonieumgebungen weit verbreitet ist. Das Endpoint Manager -Modul stellt einen AJAX-Handler unter /admin/ajax.php bereit, der...

perl_spreadsheet_excel_rce_poc

ParseExcel Sicherheitslücke TL;DR: RCE durch Logik beim Parsen von Formatzeichenfolgen. Kurze Erklärung des Exploits Die Hauptursache des Exploits liegt im Aufruf von eval auf eine nicht validierte Benutzereingabe in Utility.pm...

CVE-2025-55182

CVE-2025-55182 Codice di prova per la vulnerabilità di esecuzione remota di codice RCE nelle React Server Functions Next.js, ecc.. Sfrutta l'inquinamento del prototipo per eseguire codice arbitrario sul server senza autenticazione. Attenzione : questo repository è a scopo educativo e di ricerca. ...