991495 matches found
WSUS-CVE-2025-59287-RCE
WSUS-CVE-2025-59287-RCE CVE-2025-59287 es una vulnerabilidad de ejecución remota de código crítica CVSS 9.8 que afecta a TODOS los Microsoft Windows Server Update Services, también conocidos como WSUS, y ha sido explotada en ataques reales. La vulnerabilidad explota una deserialización insegura e...
CVE-2026-41089
CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...
PoC-RCE-Rukovoditel
PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...
cve-2024-38077-madlicense_reproduction
CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution "MadLicense" I. Vulnerability Overview CVE ID : CVE-2024-38077 Alias : MadLicense CVSS Score : 9.8 Critical Type : Heap-Based Buffer Overflow CWE-122 Discovered by : Ver, Lewis Lee, Zhiniang Peng Description : A...
By-Poloss..-..CVE-2026-39938
CVE-2026-39938: Cacti = 1.2.30 - Unauthenticated LFI Executive Summary Field| Value ---|--- CVE ID| CVE-2026-39938 CVSS Score| 9.8 Critical Affected Product| Cacti Affected Versions| = 1.2.30 Patched Version| 1.2.31 Fix Commit| 9871f0c Vulnerability Details Root Cause The vulnerability exists in...
CVE-2023-34468
CVE-2023-34468 — PoC de RCE mediante H2 RUNSCRIPT en ExecuteSQL de Apache NiFi PoC corto en Python para abusar de un procesador ExecuteSQL editable de Apache NiFi con una carga útil RUNSCRIPT de H2 para desencadenar la ejecución remota de comandos a través de una reverse shell de Bash. Solo para...
CVE-2026-3891
CVE-2026-3891 — Pix for WooCommerce Unauthenticated File Upload RCE Nonce Leak → certificatecrtpath Upload → Code Execution Overview CVE-2026-3891 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin by linknacional versio...
cve-2025-63888-exploit
CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...
CVE-2026-42945
NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...
CVE-2025-55182
CVE-2025-55182 Scanner & Exploiter !Warning This repository is intended for educational and research purposes only. Use the provided PoCs exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this repository is illegal...
wp2shell
🔍 wp2shell - Escáner y Exploit de Vulnerabilidad CVE-2026-63030 de WordPress ⚡ Escáner y Exploit de Vulnerabilidad en Tiempo Real para CVE-2026-63030 wp2shell 📌 Descripción general wp2shell es un kit de herramientas integral para detectar y explotar CVE-2026-63030 , una vulnerabilidad crítica en...
CVE-2026-39047
CVE-2026-39047: Framework de explotación del protocolo RAW de impresoras Epson Repositorio: https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 Script PoC: poc.py Objetivo simulado: mockprinter.py Autor: J4ck3LSyN Descripción general Este framework demuestra la vulnerabilidad CVE-2026-39047 : un...
CVE-2026-82602
This vulnerability affects SeaCMS up to version 13.6 , specifically in the file /ass.php . A remotely exploitable authorization bypass allows unauthenticated attackers to manipulate the file and gain partial access to confidential data. No integrity or availability impact is reported. The exploit...
CVE-2026-82602 SeaCMS ass.php authorization
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used...
EUVD-2026-68311
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used...
CVE-2025-14558
CVE-2025-14558 Inyección de comandos DNSSL en rtsold de FreeBSD RCE Descripción rtsold8 no valida los nombres de dominio DNSSL en busca de metacaracteres de shell antes de pasarlos a resolvconf8. La sustitución de comandos mediante $ permite la ejecución remota de código desde una red adyacente...
solrradar
Mass Reconnaissance & Exploitation Framework for Apache Solr Velocity Template Injection → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigation Disclaimer...
react2shell-poc
React2Shell - CVE-2025-55182 PoC Prueba de concepto para CVE-2025-55182 , una vulnerabilidad crítica de ejecución remota de código no autenticada en React Server Components. Puntuación CVSS: 10.0 Crítica Vulnerabilidad La vulnerabilidad se encuentra en el deserializador del protocolo Flight de...
CVE-2026-3288
CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...