CVE-2025-68613-POC

🚨 CVE-2025-68613: Vulnerabilidad RCE Crítica en n8n Tabla de Contenidos 1. Resumen 2. ¿Qué es n8n? 3. Conceptos Básicos de la Vulnerabilidad 4. Detalles Técnicos 5. Versiones Afectadas 6. Mecánica de Explotación 7. Impacto en el Mundo Real 8. Métodos de Detección 9. Remediación y Mitigación 10...

CVE-2025-55182

React2Shell: CVE-2025-55182 Walkthrough Author: Kavienan J Vulnerability discovered by: lachlan2k, who responsibly disclosed it to the React team. For updates on this vulnerability, visit: react2shell.com Table of Contents 1. Introduction 2. Background 3. Understanding ReactFlightReplyServer.js 4...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 Omisión de Autenticación y Ejecución Remota de Código en F5 BIG-IP iControl REST. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd,...

cisco-rce

CVE-2017-3881 Ejecución remota de código en Cisco IOS Este repositorio contiene código de Prueba de Concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - PoC de Inyección de Comandos en CyberPanel Un entorno de prueba de concepto y plantilla Nuclei para probar CVE-2024-51568, una vulnerabilidad crítica de inyección de comandos sin autenticación en CyberPanel. Detalles de la Vulnerabilidad CVE: CVE-2024-51568 Severidad: Crítica CVS...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the CodeScoring software development platform lies in its inability to eliminate special elements from the template creation mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to execute arbitrary code.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

nodejshell

NODEJSHELL - Exploit de reverse shell para deserialización en NodeJs CVE-2017-5941 El exploit genera automáticamente el payload de reverse shell que está codificado en decimal y luego en base64. Después de eso, ese payload se envía mediante una solicitud HTTP POST que serializa la entrada del...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-7808

CVE-2024-7808 💀 $$\colorred ESTE \space EXPLOIT \space PUEDE \space VIOLAR \space LA \space LEY.$$ $$\colorred\space USTED \space ES \space RESPONSABLE \space DE \space SUS \space ACCIONES.$$ $$\colorredSOLO \space CON \space FINES \space DE \space DEMOSTRACIÓN.$$ DESCRIPCIÓN RCE por usuarios no...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the CrocoTime employee working time management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary codes.

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

nmap-log4shell

Script NSE Nmap Log4Shell para descubrir Apache Log4j RCE CVE-2021-44228 nmap-log4shell es un script NSE para descubrir la vulnerabilidad Apache Log4j RCE CVE-2021-44228 a través de la red. El script es capaz de inyectar el payload de exploit log4shell a través de cabeceras HTTP por defecto o a...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Arrastrar y soltar múltiples archivos para Contact Form 7 Descripción: Subida de archivos arbitrarios a través de drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 permite la subida de archivos .phar, lo que conduce a ejecución remota de código en...

wp_CVE-2020-35489_checker

wpCVE-2020-35489checker CVE-2020-35489 - Introducción El wpCVE-2020-35489checker es una herramienta de línea de comandos escrita en Python diseñada para comprobar si un sitio web WordPress es vulnerable a CVE-2020-35489. Esta vulnerabilidad en particular proviene de una falla de seguridad en el...

CVE-2018-19422-SubrionCMS-RCE

CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated Remote Code Execution /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. Exploit Usage Commands: Windows/Linux: $ sudo python3...

CVE-2019-7216

CVE-2019-7216 In filechucker.cgi version 5.09 and filechuckerprefs.cgi version 4.99e-free-e02 there is a filter bypass, upon upload, that can lead to remote code execution providing that the user uploads a malicious file. The bypass occurs when filechucker attempts to filter out the file extensio...

struts2-rce-cve-2017-9805-ruby

Vulnerabilidad Struts2 - CVE-2017-9805 Descripción Apache Struts2 REST Plugin XStream RCECVE-2017-9805 Uso Usage: cve20179805poc.rb targeturi cmd ruby cve20179805poc.rb 127.0.0.1 ping -c 4 192.168.0.1...