mvn_pwn

MVN PWN Pom.xml Maven dannoso che utilizza "groovy-maven-plugin" per ottenere RCE Il payload completo con le dipendenze può essere trovato nel seguente blog: https://security.humanativaspa.it/abusing-mavens-pom-xml/...

CVE-2026-56291

Versione di scansione automatica ed Exploit CVE-2026-56291 POC Joomla Upload arbitrario di file non autenticato che porta a RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

CVE-2022-22954

CVE-2022-22954 VMware Workspace ONE Access - Vulnerabilità di esecuzione di codice remoto Code By:Junsheng @Laboratorio di Sicurezza Informatica Orange Laboratorio di Sicurezza Informatica Orange https://0range.team/ 0x00 Panoramica dei rischi Questo strumento è destinato solo a test di sicurezza...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Verwendung root@kitploit: python3 CVE-2025-63406.py -u -...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei-Vorlage, die CVE-2026-33017 erkennt — eine nicht authentifizierte Remote-Code-Ausführungs-Schwachstelle in Langflow ≤ 1.8.2 , die über den öffentlichen flow-build-Endpunkt erreichbar ist: root@kitploit: POST...

react-rsc-cve-2025-55182-lab

CVE-2025-55182 Lab — React Server Components RCE Pädagogisches Labor, das CVE-2025-55182 demonstriert – eine kritische CVSS 10.0 Remote Code Execution-Sicherheitslücke in React Server Components, verursacht durch Prototyp-Verschmutzung im Flight-Protokoll-Deserialisierer. Haftungsausschluss: Dies...

K000163051: libssh2 vulnerability CVE-2026-55200

Security Advisory Description libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

React2Shell-Kingdom

Progetto di dimostrazione della vulnerabilità React CVE-2025-55182 ⚠️ AVVISO DI SICUREZZA Questo progetto dimostra una vulnerabilità critica di RCE CVE-2025-55182 / React2Shell in React Server Components 19.1.1. SOLO PER SCOPI EDUCATIVI E DI RICERCA SULLA SICUREZZA NON distribuire MAI in produzion...

CVE-2023-50164-HTB-strutted

CVE-2023-50164: Una vulnerabilità critica di sicurezza, identificata come CVE-2023-50164 CVE: 9.8, è stata trovata in Apache Struts, consentendo agli aggressori di manipolare i parametri di caricamento dei file, cosa che può potenzialmente portare a un path traversal non autorizzato e...

CVE-2024-44902-env

CVE-2024-44902 - ThinkPHP Unsicheres Deserialisieren RCE Verwundbare Umgebung zur Validierung von nuclei-templates. Schwachstellendetails...

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — Injeção de SQL no NocoBase → RCE como superusuário do PostgreSQL Injeção de SQL na ação myInAppChannels:list do NocoBase @nocobase/plugin-notification-in-app-message ≤ 2.0.60. O parâmetro de requisição filterlatestMsgReceiveTimestamp$lt é interpolado diretamente em uma string SQL...

n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — exploit n8n da lettura file non autenticata a RCE...

Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Modulo Metasploit per il sistema "video management" Geutebrueck GCore. Testato con le versioni 1.3.8.42 e 1.4.2.37. Esecuzione remota completa di codice con privilegi NT/System su Windows Win 2012R2, Win8.1, ... con i prodotti Geutebrueck installati GCore. Autori:...

dockerevil

dockerevil एक सरल रिपॉजिटरी जो Docker तकनीक में मेरी सुरक्षा खामियों को संग्रहीत करती है 2016 - 2017 Docker API विशेषाधिकार वृद्धिLPE/RPE ऑफ़लाइन सर्वर/न्यूनतम इमेज से विशेषाधिकार वृद्धि/TAR Dockerfile से बिल्ड Docker SUDO विशेषाधिकार वृद्धि PoC Nmap स्क्रिप्ट 2019 CodeStudent1995 आधारित एक्सप्लॉ...

Magneto-PolyShell

Magento 2 RCE Exploit - Unauthentifizierter Datei-Upload zu RCE ⚠️ Dieses Tool dient ausschließlich zu Bildungs- und autorisierten Sicherheitstests. Unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören, ist illegal. Dieses Exploit zielt auf eine kritische Schwachstelle für nicht...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution Exploit di iniezione di codice PHP per Dolibarr ERP/CRM v17.0.0 che permette di ottenere una shell inversa come utente www-data tramite il modulo Website/CMS. ⚠️ Solo per uso educativo e audit autorizzati. 📑 Indice Che cos'è...

ghostlock-vagrant-box

Testumgebung für vollständige Angriffskette: Nginx RCE → GhostLock LPE Übersicht Dieses Repository stellt eine Vagrant-Umgebung bereit, die eine komplette zweistufige Angriffskette demonstriert. Die Testumgebung richtet automatisch eine isolierte Ubuntu 22.04 LTS -VM ein, die absichtlich so...

CVE-2022-26134

Confluence में Pre-Auth Remote Code Execution OGNL Injection के माध्यम से CVE-2022-26134 Ruby में Confluence एक वेब-आधारित कॉर्पोरेट विकी है जिसे ऑस्ट्रेलियाई सॉफ्टवेयर कंपनी Atlassian द्वारा विकसित किया गया है। 2 जून, 2022 को Atlassian ने अपने Confluence Server और Data Center अनुप्रयोगों के लिए ...