CVE-2020-14882

CVE-2020-14882 Этот скрипт позволяет выполнять удалённый код RCE на сервере Oracle WebLogic с помощью неаутентифицированного GET-запроса. Он эксплуатирует уязвимость CVE-2020-14882. Выполняя произвольные команды, злоумышленник может получить несанкционированный доступ к серверу. Exploit Details...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit Этот эксплойт реализует уязвимость удаленного выполнения кода в Ruby-on-Rails при использовании render на предоставленных пользователем данных. Он написан на Python3, не забудьте установить библиотеку requests. Вот команда: root@kitploit: pip3 install requests...

halo-2.25.4-CVE-2026-67919

Halo 2.25.4의 검증되지 않은 플러그인 URI 설치를 통한 인증된 원격 코드 실행RCE 1. 취약점 요약 Halo 버전 2.25.4에서 심각한 보안 취약점이 확인되었습니다. 이 애플리케이션은 원격 URI에서 플러그인을 설치하거나 업그레이드할 수 있는 관리자 엔드포인트를 제공합니다. 그러나 시스템은 URI의 소스 도메인을 검증하지 못하며, 이 특정 구성 요소에는 SSRF서버 측 요청 위조 보호 기능이 없습니다. 플러그인 관리 권한이 있는 인증된 공격자는 악의적으로 제작된 플러그인 JAR 파일에 대한 링크를 제공할 수...

gimp: GIMP: Remote code execution via PSD file parsing integer overflow

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 Эти инструменты с открытым исходным кодом, вы можете переделывать их, но помните: никогда не удаляйте упоминание об авторе. Эти инструменты бесплатны и не предназначены для продажи!!! Результаты Shell зависят от вашего списка!!! Jenderal92 не несёт...

CVE-2026-27597

CVE-2026-27597 — удалённое выполнение кода в версии Быстрое использование root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Примечания по эксплуатации Серьёзность: КРИТИЧЕСКАЯ CVSS: 10.0 Воздействие: Конфиденциальность, Целостность, Доступность...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Microsoft Office SharePoint의 역직렬화 취약점 🚀 개요 이 랩은 Microsoft Office SharePoint에서 원격 코드 실행RCE을 가능하게 하는 역직렬화 취약점을 시연합니다. 이 문제는 SharePoint의 객체 역직렬화 루틴 내에서 신뢰할 수 없는 직렬화 데이터를 부적절하게 처리하여 발생하며, 인증된 공격자가 대상 서버에서 임의의 코드를 실행할 수 있게 합니다. CVSSv3 점수 8.8의 높은 심각도 취약점으로, Enterprise Server 2016,...

cve-2019-5420-POC

Exploit ActiveSupport de Rails CVE-2019-5420 POC à considérer pour enchaîner avec CVE-2019-5418 ! Se marie bien avec CVE-2019-5418 ! POC Screenshot 🚨 Avertissement Ce dépôt contient un exploit de preuve de concept PoC démontrant l'exécution de code à distance RCE dans des applications Ruby on Rai...

CVE-2026-0911

CVE-2026-0911 — Hustle 모듈 가져오기 PoC WordPress 플러그인 Hustlewordpress-popup, WPMU DEV에 대한 CVE-2026-0911 범위 내에서, 인증이 필요한 모듈 가져오기 엔드포인트를 통한 업로드 동작을 테스트하는 연구/펜테스트 보조 도구입니다. 이 저장소 또는 파일 세트 내의 CVE-2026-0911.py 스크립트는 소유한 시스템 또는 서면 허가를 받고 테스트하는 시스템에서만 사용해야 합니다. 간단한 요약 취약점 로직 영향을 받는 버전Wordfence/NVD: 7.8.9.2 ...

CVE-2026-3854

CVE-2026-3854: RCE в GitHub через инъекцию в заголовок X-Stat Практическое резюме того, как работает уязвимость, обнаруженная Wiz Research во внутреннем конвейере git push GitHub.com и GitHub Enterprise Server. Предупреждение Этот материал предназначен для образовательных целей и исследований в...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC Уязвимость в Langflow 1.8.1 и более ранних версиях позволяет удалённому неаутентифицированному злоумышленнику выполнять произвольные команды на хосте. Описание Конечная точка POST /api/v1/buildpublictmp/flowid/flow позволяет любому пользователю собирать публичные...

CVE-2026-4447

CVE-2026-4447 - V8 в Google Chrome до удаленного выполнения кода Быстрое использование root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Примечания по эксплуатации Серьезность: ВЫСОКАЯ CVSS: 8.8 Воздействие: Конфиденциальность, Целостность, Доступность...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

XStream <1.4.17 - Remote Code Execution

XStream before 1.4.17 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...