oieh-router-checker

OIEH Router Checker Ein Windows-Programm, das mit einem Klick prüft, ob Ihr Router vom chinesischen Backdoor ENDLESSDOORS betroffen ist Keine Installation erforderlich · Keine Administratorrechte erforderlich · Keine Datenübertragung nach außen Was ist das? Im August 2026 entdeckte das...

CVE-2019-16278

CVE-2019-16278 Einfaches Python-Skript zur Ausnutzung von CVE-2019-16278 aufgrund einer Path-Traversal-Schwachstelle, die zu nicht authentifiziertem RCE führt. Verwendung: python3 nostroSploit.py targetIP targetPort optionaler Befehl zum Ausführen Inspiriert von:...

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Beliebiger Datei-Upload Schwachstelle CVE-2025-7441 - Technische Zusammenfassung Betroffene Komponente: StoryChief WordPress-Plugin Schwachstellentyp: Nicht authentifizierter beliebiger Datei-Upload Verwundbarer Endpunkt: /wp-json/storychief/webhook Ursache: Das...

ROOT-OS-DEBIAN-13-CVE-2026-55973 CVE-2026-55973 in unbound - Patched by Root

Root has patched CVE-2026-55973 in the unbound package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-0282-Full-version

Storks: Tool zur Ausnutzung von Remote Code Execution-Schwachstellen Überblick Storks ist ein Python-basiertes Proof-of-Concept PoC-Tool, das eine kritische Remote Code Execution RCE-Schwachstelle demonstriert, identifiziert als CVE-2025-0282 , in einem bestimmten Netzwerkgerät. Diese Schwachstel...

TryHack3M-Bricks-Heist

target:10.201.6.98 Enumeration root@kitploit: nmap -A 10.201.6.98 Da es ein WordPress mit dem Namen „brick by brick“ gibt und der Name dieses Raums „brick“ ist, befindet sich dort wahrscheinlich eine Schwachstelle. Also lasst uns WordPress enumerieren. root@kitploit: wpscan --url https://bricks.t...

mcpjam-to-root

⚠️ Avvertenza Questo repository è destinato esclusivamente a ricerca sulla sicurezza autorizzata, test di penetrazione e scopi didattici. Non utilizzare le tecniche qui descritte contro sistemi senza autorizzazione esplicita. ⚡ MCPJam → Root Dalla RCE di MCPJam Inspector a root — CVE-2026-23744,...

awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

CVE-2026-76070

CVE-2026-76070: Netis NC63 login.cgi में बेस64-डिकोडेड पासवर्ड के माध्यम से बिना प्रमाणीकरण प्री-ऑथ स्टैक बफर ओवरफ्लो, जो RCE की ओर ले जाता है शोधकर्ता: Özcan Ersan @ozcanpng प्रकटीकरण स्थिति CVE: CVE-2026-76070 विक्रेता: Netis Systems Co., Ltd. उत्पाद: Netis NC63 Wireless AC1200 Router परीक्षित...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerabile a Stored DOM XSS tramite prompt quando 'Insert Prompt as Rich Text' è abilitato, con conseguente ATO/RCE Riepilogo La funzionalità che inserisce prompt personalizzati nella finestra di chat è vulnerabile a DOM XSS quando 'Insert Prompt as Rich Text' è...

cve-2026-63030-lab

CVE-2026-63030 — Laboratorio wp2shell RCE pre-autenticazione nel core di WordPress tramite REST API Batch Route Confusion + SQL Injection...

SAP-CVE-2025-31324

SAP-CVE-2025-31324 POC Uno strumento per rilevare e sfruttare una vulnerabilità critica di upload di file non autenticato in SAP NetWeaver Visual Composer. Descrizione SAP NetWeaver Visual Composer include un componente chiamato Metadata Uploader che non dispone di adeguati controlli di...

django: Django: Remote code execution via GeoDjango spatial lookups

A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2024-30270-PoC

यह स्क्रिप्ट Cross-Site Scripting XSS और Remote Code Execution RCE का उपयोग करके Mailcow इंस्टेंस में कमजोरियों का शोषण करने के लिए डिज़ाइन की गई है। स्क्रिप्ट का उद्देश्य है: Mailcow वेब इंटरफ़ेस में XSS पेलोड इंजेक्ट करना। अनधिकृत कार्रवाइयाँ करने के लिए XSS पेलोड का उपयोग करना। सर्वर टेम्पलेट ...