CVE-2026-27597

CVE-2026-27597 - Exécution de code à distance Utilisation rapide root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notes d'exploitation Gravité : CRITIQUE CVSS : 10.0 Impact : Confidentialité, Intégrité, Disponibilité Publié : 2026-02-25 Résumé...

CVE-2025-54897-LAB

Lab : CVE-2025-54897 - Vulnérabilité de désérialisation dans Microsoft Office SharePoint 🚀 Présentation Ce lab démontre une vulnérabilité de désérialisation dans Microsoft Office SharePoint qui permet l'exécution de code à distance RCE. Le problème provient d'une gestion inappropriée de données...

cve-2019-5420-POC

استغلال ActiveSupport في Rails cve-2019-5420 POC اعتبر هذا لتسلسل مع CVE-2019-5418! يتناسب بشكل رائع مع CVE-2019-5418! لقطة شاشة POC 🚨 تحذير يحتوي هذا المستودع على استغلال إثبات المفهوم PoC يوضح تنفيذ الأوامر عن بُعد RCE في تطبيقات Ruby on Rails عبر إساءة استخدام ActiveSupport::MessageVerifier...

CVE-2026-0911

CVE-2026-0911 — PoC импорта модуля Hustle Инструмент исследования / вспомогательный инструмент для пентеста , который тестирует поведение загрузки через требующую аутентификации конечную точку импорта модуля в рамках CVE-2026-0911 для плагина WordPress Hustle wordpress-popup, WPMU DEV. Скрипт...

CVE-2026-3854

CVE-2026-3854 : RCE sur GitHub via injection dans l'en-tête X-Stat Résumé pratique du fonctionnement de la vulnérabilité découverte par Wiz Research dans le pipeline interne de git push de GitHub.com et GitHub Enterprise Server. Avertissement Ce matériel est destiné à des fins éducatives et de...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC La vulnérabilité dans Langflow 1.8.1 et versions antérieures permet à un attaquant distant non authentifié d'exécuter des commandes arbitraires sur l'hôte. Description Le point de terminaison POST /api/v1/buildpublictmp/flowid/flow permet à quiconque de construire...

CVE-2026-4447

CVE-2026-4447 - V8 dans Google Chrome avant exécution de code à distance Utilisation rapide root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notes d'exploitation Sévérité : ÉLEVÉE CVSS : 8.8 Impact : Confidentialité, Intégrité, Disponibilité Publié :...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code Execution

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management RMM 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leadin...

Laminas Project laminas-http - Remote Code Execution

Laminas Project laminas-http 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by destruct method in Zend\Http\Response\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data. id: CVE-2021-3007...

XStream <1.4.17 - Remote Code Execution

XStream before 1.4.17 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...

Chamilo LMS <= v1.11.20 Unauthenticated Command Injection

Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. id: CVE-2023-3368 info: name: Chamilo LMS = v1.11.20 Unauthenticated Command Injection...

DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

PrestaShop Responsive Mega Menu Module - Remote Code Execution

The 'Responsive Mega Menu' module for PrestaShop is prone to a remote code execution and SQL injection vulnerability. modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop allows remote attackers to execute an SQL injection or...

Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

Likeshop < 2.5.7.20210311 - Arbitrary File Upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...

TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...