CVE-2026-37003

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution RCE via prompt injection. The PythonTools and ShellTools components pass unsanitized, LLM-generated arguments directly to execution sinks including exec, runpy.runpath, and subprocess.run. An unauthenticated attacker can exploi...

CVE-2026-37007

A vulnerability in FileWriterTool in crewai-tools = 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversal sequences in the filename argument...

CVE-2026-30612

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

vRealizeLogInsightRCE

VMSA-2023-0001 POC für VMSA-2023-0001, der VMware vRealize Log Insight betrifft und die folgenden CVEs enthält: Sicherheitslücke bezüglich Directory Traversal in VMware vRealize Log Insight CVE-2022-31706 Sicherheitslücke in der Zugriffskontrolle von VMware vRealize Log Insight CVE-2022-31704...

CVE-2026-19092

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache: Lab für nicht authentifizierten beliebigen Datei-Upload zu RCE Reines lokales Docker-Lab zur Reproduktion und zum Vergleich des Verhaltens von CVE-2026-3844 im WordPress-Breeze-Cache-Plugin. Dieses Repository demonstriert das verwundbare Verhalten in Breeze Cache 2.4...

bigip-scanner

BIG-IP Scanner Определение версии программного обеспечения удалённого интерфейса управления F5 BIG-IP. Разработано с ❤️ командой Bishop Fox Cosmos. Описание CVE-2022-1388 — критическая уязвимость в интерфейсе управления F5 BIG-IP, которая позволяет злоумышленнику обойти аутентификацию и удалённо...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module overflow del buffer heap → RCE RCE confermato con successo — tramite heap overflow + iniezione di processo GDB, esecuzione di comandi arbitrari nei processi worker NGINX / OpenResty. Avvio rapido root@kitploit: Costruzione immagine NGINX + esecuzione test RCE...

EXPLOIT-CVE-2026-8832

EXPLOIT CVE-2026-8832 Uno strumento di sfruttamento per testare le vulnerabilità di Remote Code Execution RCE nel plugin WordPress WPCode Lite Insert Headers and Footers v2.3.5. Questa vulnerabilità deriva dalla registrazione del Custom Post Type CPT wpcode senza definire un capabilitytype...

git_rce

CVE-2024-32002 PoC 1. Sie müssen die symbolische Link-Option von Git einrichten: root@kitploit: git config --global core.symlinks true 2. Nutzen Sie dann CVE-2024-32002 mit dem folgenden Befehl aus: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Angriffsszenario...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-Schwachstellenanalyse-Vorfallreaktionsbericht Reale Simulation: FTP-Dienstausnutzung ProFTPD CVE-2015-3306 Reale Simulation: FTP-Dienstausnutzung ProFTPD CVE-2015-3306 📌 Überblick Dieses Projekt demonstriert einen vollständigen Arbeitsablauf von Schwachstellenbewertung und Vorfallreaktion...

CVE-2022-26134

CVE-2022-26134 Iniezione Object-Graph Navigation Language OGNL pre-autenticazione in Confluence Confluence è un prodotto di collaborazione workspace basato sul web sviluppato da Atlassian. Può essere distribuito on-prem o come parte di Atlassian Cloud. È composto da 3 funzionalità chiave: pagina,...

CVE-2021-21983

CVE-2021-21975 Beliebiger Datei-Schreibzugriff in der VMware vRealize Operations vROps Manager API führt zu Remote Code Execution RCE vRealize Operations vROps ist ein Tool für selbstfahrendes, KI-gestütztes IT-Operations-Management – von Anwendungen bis zur Infrastruktur – das VMware-Cloud- und...

CVE-2025-55182-Exploit-PoC-Scanner

CVE-2025-55182 – Exploit de RCE em React Server Components v2.0 Uma ferramenta abrangente de pesquisa em segurança para testar as vulnerabilidades CVE-2025-55182 e CVE-2025-66478 em React Server Components RSC e Server Actions do Next.js. Visão Geral da Vulnerabilidade...

CVE-2026-81934

Redis contains a use-after-free vulnerability in the tlsProcessPendingData() function, which manages the TLS pending-data list. Only deployments configured with TLS support are affected; non-TLS instances are not impacted. A remote, unauthenticated attacker can trigger memory corruption over TLS ...

CVE-2026-81934 Redis TLS pending-data list use-after-free

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server...

CVE-2025-67887

CVE-2025-67887 1C-Bitrix = 25.100.500 Modulo di Traduzione Vulnerabilità di Esecuzione Remota di Codice...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

EUVD-2026-67224

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...