The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

smbexec

root@kitploit: smbexec Un attacco rapido in stile psexec con gli strumenti samba Concetto e script originali di Brav0Hax & PureHate Portato in ruby e modificato da Smilingraccoon e Zeknox Nome in codice - Machiavellian Scritto perché ci siamo stufati che il PSExec di Metasploit venisse beccato Un...

CVE-2020-7247

CVE-2020-7247 Proof of Concept Exploit per CVE-2020-7247 Esecuzione remota su OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 testato su: OpenBSD 6.6 crediti a Marco Ivaldi [email protected] per il payload Utilizzo remote $ go run CVE-2020-7247.go -u 192.168.0.2 ...

SharpWMI

SharpWMI SharpWMI è un'implementazione in C di varie funzionalità WMI. Include query WMI locali/remote, creazione remota di processi tramite win32process ed esecuzione remota di VBS arbitrari attraverso sottoscrizioni a eventi WMI. Sono supportate anche credenziali alternative per i metodi remoti...

gargamel

Gargamel Compilazione Compilato e testato con Rust 1.50+. Apri il terminale nella directory del progetto e per compilare una build di release digita root@kitploit: cargo build --release La build di debug può essere compilata usando root@kitploit: cargo build L'eseguibile compilato si trova...

Fu3l-F1lt3r

|\ \ |\ | |\ \ |\ / |\ \ | \ |\ \ \ /\ \ \\ ||\ /\ \ \ \ \ /|/|\ \ \ | \ ||\ /\ \ |\ \ \ \ \ \\ \ |\ \ \ \ \ \ |/ \ \ \ \ \ \ \ \ |\ \ \ \ \ | \ \ \\ \ \ \ \ \ | \ \ \ \ \ \ \ \ \ \ \ | \ \ \ |\ \ \ \ \ \ \ \ |\ \ || ||| ||| || | ||||| ||| ||| Un'implementazione in Rust di CVE 2018-16763 con...

SharpMove

SharpMove - .NET authentifizierte Ausführung auf entfernten Hosts Kompilieren Zum Kompilieren öffnen Sie das Visual Studio-Projekt und kompilieren Sie es für die Veröffentlichung. Optionen WMI SCM DCOM Mehrere Taskplaner Dienst-DLL-Hijack DCOM-Server-Hijack Geplanten Task ändern Dienst-Binärpfad...

CVE-2019-16278

CVE-2019-16278 CVE-2019-16278Nostromo httpdBefehlsausführung ➜ Downloads python nostromo.py 114.114.114.114 8080 pwd /bin ➜ Downloads python nostromo.py 114.114.114.114 8080 id uid=65534 gid=65534 ➜ Downloads python nostromo.py 114.114.114.114 8080 "ls -al" drwxr-xr-x 2 0 0 0 Apr 12 2013...

CVE-2026-55534

PraisonAI (a multi-agent teams system) is affected by an authentication bypass in versions 4.6.34 through 4.6.58 . When using praisonai serve agents, the --api-key flag is accepted but the _create_agents_app() function fails to enforce it on the POST /agents and POST /agents/{agent_name} endpoint...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket-Implementierung des PrintNightmare PoC, ursprünglich erstellt von Zhiniang Peng @edwardzpeng und Xuefeng Li @lxf02942370 Getestet auf einem vollständig gepatchten 2019 Domain Controller Ausführen von bösartigen DLLs remote oder lokal Installation Vor der...

WMIExec

WMIexec Set di script Python che eseguono diversi metodi di esecuzione di comandi tramite il protocollo WMI. Post del Blog https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ Utilizzo wmiexecscheduledjob.py È uno script Python che si autentica a un'istanza WMI remota ...

MaccaroniC2

MaccaroniC2 - AsyncSSH का उपयोग करके कमांड और कंट्रोल को सशक्त बनाना MaccaroniC2 एक प्रूफ-ऑफ-कॉन्सेप्ट कमांड और कंट्रोल फ्रेमवर्क है जो शक्तिशाली AsyncSSH पायथन लाइब्रेरी का उपयोग करता है, जो SSHv2 प्रोटोकॉल का एक एसिंक्रोनस क्लाइंट और सर्वर कार्यान्वयन प्रदान करती है और PyNgrok रैपर का उपयोग ngr...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution

n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...

Laravel Livewire v3 - Remote Command Execution

Livewire v3 Laravel contains a vulnerability in its component hydration/update mechanism that can be exploited to reach remote command execution RCE without authentication under certain conditions. id: CVE-2025-54068 info: name: Laravel Livewire v3 - Remote Command Execution author: flame-11...

TYPO3 ceselector Extension - Insecure Deserialization

TYPO3 extension contains a PHP Object Injection caused by passing attacker-controlled cookie to unserialize without validation, letting remote unauthenticated attackers achieve remote code execution, exploit requires Persistent Mode: Static configuration. id: CVE-2026-46725 info: name: TYPO3...

Apache Unomi <1.5.2 - Remote Code Execution

Apache Unomi allows conditions to use OGNL and MVEL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process. This vulnerability affects all versions of Apache Unomi prior to 1.5.2. id:...

MajorDoMo thumb.php - OS Command Injection

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. id: CVE-2023-50917 info: name: MajorDoMo thumb.php - OS Command Injection author: DhiyaneshDK severity: critical...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...