CVE-2025-1094-PoC-Postgre-SQLi

CVE-2025-1094 の分析とエミュレーション設定 2025年3月14日に実施されたこの詳細な調査では、提供されたエミュレーション設定と概念実証（PoC）の実行に基づいて、PostgreSQLにおける仮想的な高深刻度SQLインジェクション脆弱性であるCVE-2025-1094を調査します。分析では、脆弱性の概要、根本原因、ファイルの寄与、PoCの手順、および緩和策をカバーし、エミュレーションプロセスからのすべての複雑な詳細を組み込んでいます。 脆弱性の概要...

CVE-2026-23744

CVE-2026-23744 – 개념 증명PoC 이 PoC의 Python 스크립트는 MCPJam inspector버전 리스닝 포트로 교체 그런 다음 다른 셸을 열고 PoC를 실행하세요: root@kitploit: cd CVE-2026-23744 python3 exploit.py 참고 자료 HTTP 엔드포인트 노출로 인한 MCPJam inspector의 RCE GHSA-232v-j27c-5pp6 MCPJam/inspector@e6b9cf9...

CVE-2023-38408

Справочная информация https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

Log4j-Vulnerability

Vulnérabilité Log4j Tutoriel: https://youtu.be/PNDBjoT83zA Tutoriel: https://cryptodeeptech.ru/log4j-vulnerability Contexte sur Log4j L'équipe de sécurité d'Alibaba Cloud a divulgué publiquement une vulnérabilité critique CVE-2021-44228 permettant une exécution de code à distance non authentifiée...

CVE-2026-32746

CVE-2026-32746 — Переполнение буфера SLC в LINEMODE telnetd Удалённое выполнение кода до аутентификации через переполнение буфера в обработчике SLC Set Local Characters режима LINEMODE в telnetd из GNU InetUtils. CVSS 3.1: 9.8 Critical | CWE: CWE-120, CWE-787 Обзор Функция addslc в telnetd/slc.c...

CVE-2026-77018

The Workeera WordPress plugin (Remote Tech Job Board) before 1.0.6 allows users with a subscriber role to submit unrestricted profile values, which the plugin writes as an unvalidated file into a publicly reachable directory. This mass-assignment flaw enables arbitrary file upload and, consequent...

CVE-2026-77018 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

EUVD-2026-66880

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

CVE-2026-19225

Defender Security WordPress plugin versions before 6.2.0 fail to restrict a network-wide setting (via the Hub Connector ) to network administrators on multisite installations. As a result, an administrator of any single site in the network can execute arbitrary code across the entire network . Th...

WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...

CVE-2026-19225 Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 POC 최적화, 일회성 검증이 더 이상 아님 Optimized POC, no longer a one-time validation 경고: 이 프로그램은 로그 정보의 무결성을 파괴합니다. 서버 데이터를 백업하십시오! 서버 침투 테스트 권한이 있는 경우에만 사용하십시오! Warning: This program will destroy log information integrity, please back up server data! Use only if you have serve...

CVE-2022-22947_EXP

一、Spring Cloud Gateway 원격 코드 실행 취약점 危害等级：高危 POC/EXP情况：已公开 CNVD编号：CNNVD-2022-16402 ​ CVE编号：CVE-2022-22947 二、影响范围： VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0，python cve-2022-22947.py 验证单个目标： 1、python cve-2022-22947.py 进入交互模式后，根据提示输入目标url和需要执行的命令，注意命令的正确性 2、python...

CVE-2023-46805

19/01/2024 Update Updated with the latest info based on Assetnote's blog. Now three checks are executed before a status is shown, this also to better detect older versions of Avanti Blogs with analysis of the CVE: https://attackerkb.com/topics/AdUh6by52K/cve-2023-46805/rapid7-analysis...

CVE-2019-19781

CVE-2019-19781 Эксплойт удаленного выполнения кода для Citrix Application Delivery Controller и Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST КОМАНДАДЛЯВЫПОЛНЕНИЯ например : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Обзор CVE-2022-21445 оценка CVSS 9,8 — это уязвимость, связанная с ненадёжной десериализацией данных, обнаруженная в компоненте ADF Faces, которая может быть удалённо эксплуатирована злоумышленниками без аутентификации pre-authentication для выполнения RCE. Уязвимость была обнаружена двумя...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb: удалённое выполнение кода | cve-2022-22980 poc Описание Приложение Spring Data MongoDB уязвимо к SpEL инъекции при использовании методов запросов, аннотированных @Query или @Aggregation, с выражениями SpEL, содержащими заполнители параметров запроса для...

CVE-2019-19609

CVE-2019-19609 Strapi Framework vulnérable à une exécution de code à distance Eh bien, je n'ai trouvé aucun exploit pour CVE-2019-19609, donc j'en ai écrit un. :/ Utilisation root@kitploit: python3 exploit.py Une vidéo https://youtu.be/alhZJmuUd2s Plus d'informations...

CVE-2026-3288-lab

CVE-2026-3288 취약 실습 환경 Docker NGINX Ingress Controller 구성 주입 ⚠️ 경고 : 이 실습 환경은 공인된 보안 교육 목적으로만 의도적으로 취약하게 구성되어 있습니다. 취약점 개요 CVE-2026-3288 CVSS 8.8 높음 - NGINX Ingress Controller의 구성 주입 영향 버전 : v1.13.8, v1.14.4, v1.15.0 공격 벡터 : 경로 구성의 큰따옴표" 주입 영향 : 원격 코드 실행, 비밀 노출, 자격 증명 탈취 관련 취약점 : CVE-2026-24512 유사...

CVE-2014-0472

CVE-2014-0472 Используйте root@kitploit: docker-compose up -d Доступ к localhost:8083 Ссылка: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. Присутствует одно или несколько представлений, которые конструируют URL на основе пользовательского ввода обычно параметр "next" в строке...