CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interattiva dirottamento HTTP + POST + AES-256-CBC/BASE64 Rilevamento -dnslog Rilevamento senza output DNSLog Nuclei -poc Rilevamento Echo di vulnerabilità Sfruttamento -exp Shell interattiva echo base64 -exp2 Shell interattiva dirottamento HTT...

cve-2023-30253

CVE-2023-30253 विवरण Dolibarr 17.0.1 से पहले के संस्करण में, एक प्रमाणित उपयोगकर्ता अपरकेस हेरफेर के माध्यम से दूरस्थ कोड निष्पादन की अनुमति देता है: इंजेक्ट किए गए डेटा में ?PHP को ?php के बजाय उपयोग करना। दस्तावेज़ीकरण CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh सेटअप root@kitploit: git...

CVE-2026-74997

A flaw was found in Roundcube Webmail. The cmdlearn driver of the markasjunk plugin is vulnerable to remote code execution via crafted placeholder replacement values...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 Eine kuratierte Liste großartiger Repos zu CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n https://github.com/jas502n/Log4j2-CVE-2021-44228...

CVE-2023-27350

CVE-2023-27350 POC per CVE-2023-27350 che colpisce PaperCut MF/NG Versioni Affette 'PaperCut MF o NG versione 8.0 o successive escluse le versioni corrette su tutte le piattaforme OS.' Riepilogo Questo POC utilizza una vulnerabilità di bypass dell'autenticazione concatenata con l'abuso della...

CVE-2023-21716-POC

Storia Nel febbraio 2023, Microsoft ha corretto una vulnerabilità critica in Microsoft Word, identificata come CVE-2023-21716 con un punteggio CVSS di 9.8, che poteva consentire agli aggressori di eseguire codice remoto senza autenticazione. Questa vulnerabilità interessava anche il riquadro di...

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: Ricerca su CVE-2024-23222 📌 Panoramica Questo repository contiene un'analisi tecnica completa e una ricerca di deoffuscazione del Coruna iOS Exploit Kit. La ricerca si concentra sulla documentazione di come la catena di exploit prenda di mira CVE-2024-23222 — una...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: إثبات المفهوم لاستغلال Apache ActiveMQ عن بُعد RCE الواجب: الواجب الثالث لمادة SSP الفريق: RCE You Later الأعضاء: Banica Horia Alexandru, Comarlau Vlad-Constantin رابط فيديو لاستخدام المستودع لعمل إثبات المفهوم: https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 نظرة عامة يحتوي هذا...

CVE-2026-40877

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2025-55182-PoC

⚡ React2Shell Exploit PoC CVE-2025-66478 Esecuzione remota di codice RCE su Next.js tramite inquinamento del prototipo nei Server Components 🕵️‍♂️ Panoramica Questo repository contiene una Prova di Concetto PoC per CVE-2025-66478 indicata anche come CVE-2025-55182 in alcuni contesti, una...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Upload Arbitrário de Arquivo Autenticado Assinante+ Descrição O plugin Import Export For WooCommerce para WordPress é vulnerável a uploads arbitrários de arquivos devido à falta de validação de tipo de arquivo em todas as versões até, e...

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authentifiziert Abonnent+ Beliebige Dateierstellung Beschreibung: Das GPX Viewer-Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung und Dateityp-Validierung in der Funktion gpxvfileupload in all...

CVE-2026-40877 Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2026-40877 Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2026-40877

Combodo iTop , a web-based IT service management tool, is vulnerable to PHP object injection in its user preference functionality prior to version 3.2.3 , which can lead to remote code execution . The attack vector is network-based with low complexity and requires low privileges and user interact...

CVE-2025-67435-PoC

CVE-2025-67435 शोधकर्ता : Chowdhury Faizal Ahammed PluckCMS Zip Slip दूरस्थ कोड निष्पादन भेद्यता रिपोर्ट कार्यकारी सारांश यह रिपोर्ट PluckCMS में पाई गई एक गंभीर सुरक्षा भेद्यता का दस्तावेजीकरण करती है जो प्रमाणित हमलावरों को Zip Slip आक्रमण वेक्टर के माध्यम से दूरस्थ कोड निष्पादन प्राप्त करने की...

CVE-2026-39975 Combodo iTop: Remote code execution using external auth variable value

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...

CVE-2026-39975 Combodo iTop: Remote code execution using external auth variable value

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...

Popcorn-TJNULL-OSCP-

HackTheBox: Write-up di Popcorn Data: 05 giugno 2026 Difficoltà: Facile Piattaforma: HackTheBox Tecniche principali: Enumerazione di porte e servizi, Fuzzing delle directory Gobuster, Evasione del caricamento file, Manipolazione delle richieste HTTP Burp Suite, Esecuzione remota di codice RCE,...

CVE-2026-6009

⚠️ Avvertenza: Questo repository è solo a scopo educativo e per test di sicurezza autorizzati. Non utilizzare contro sistemi che non possiedi o per i quali non hai ottenuto esplicita autorizzazione scritta. CVE-2026-6009 Prova di Concetto Riepilogo La libreria Jaspersoft report versione = 7.0.3 è...