CVE-2025-55182

👻 CVE-2025-55182 Go эксплойт Интерактивный инструмент RCE для CVE-2025-55182 React Server Components 🎯 Что это? CVE-2025-55182 — минимальный интерактивный инструмент эксплуатации RCE, нацеленный на CVE-2025-55182 , критическую уязвимость в React Server Components RSC, затрагивающую React 19.0.0 –...

CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

CVE-2026-73752

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX (HPE). Successful exploitation allows an attacker to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with an a...

EUVD-2026-69616

An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...

EUVD-2026-69614

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

CVE-2026-73750

CVE-2026-73750 affects the authentication module of HPE ArubaOS-CX (AOS-CX) , specifically an API endpoint. The root cause is improper handling of malformed or truncated input, constituting a buffer overflow. An authenticated remote attacker—via a compromised or hostile authentication server—can ...

CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

CVE-2026-73749

CVE-2026-73749 affects a daemon in HPE AOS-CX , where multiple buffer overflow vulnerabilities arise from improper processing of malformed input. An unauthenticated remote attacker can exploit these by sending specially crafted packets to the affected service, potentially achieving remote code ex...

CVE-2019-9202

CVE-2019-9202 Nagios IM 2.6 원격 코드 실행 익스플로잇: CSRF + SQLi + RCE + LPE -- 원격 루트 설명 CSRF교차 사이트 요청 위조/인증 우회CVE-2019-9203를 연결하여 Union 기반 SQL 인젝션CVE-2019-9204, 원격 코드 실행RCECVE-2019-9202 및 로컬 권한 상승LPECVE-2019-9166을 악용하여 원격 Nagios XI 서버에서 루트 권한을 얻을 수 있습니다. 요구 사항 피해자는 Nagios XI에 인증된 상태여야 하며, 아는 한 최소 권한만으로도...

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell RCE в Webmin целевой URL c - учетные данные для webmin sl - ваш локальный IP-адрес сервера и порт для размещения полезной нагрузки s - IP для обратного вызова p - порт для обратного вызова Ссылки https://www.webmin.com/security.html...

CVE-2023-3722

CVE-2023-3722 CVE-2023-3722 Avaya Aura Device Services の無制限ファイルアップロード RCE の Python POC。 このスクリプトは、PUT リクエストを使用して、8桁のランダム生成ファイル名を持つ PHP ファイルをアップロードします。次に、GET リクエストを行い、そのファイルを取得し、出力を解析してコマンドの出力を得ます。 実行方法 root@kitploit: python3 ./CVE-2023-3722.py example.com:444 --query "id" root@kitploit: python3...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 конструктор payload-ов и эксплойт Информация / Помощь root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic...

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 개념 증명PoC 중대한 보안 취약점 데모 - CVSS 10.0 - React Server Components의 원격 코드 실행 ⚠️면책 조항 교육 목적으로만 사용하세요! 이 저장소는 중대한 보안 취약점을 시연합니다. 프로덕션 시스템이나 외부에 노출된 네트워크에서는 절대 사용하지 마세요. 🚨취약점 세부 정보 CVE ID: CVE-2025-55182 React / CVE-2025-66478 Next.js CVSS 점수: 10.0 치명적 영향 대상:...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Установите необходимые библиотеки с помощью: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE COD...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 или 6.0 - Эксплуатация удаленного выполнения кода Чтобы установить зависимости, выполните: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Вот как использовать эксплойт:...

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE Эксплойт Автор: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 Этот репозиторий содержит proof-of-concept эксплойт для CVE-2023-51409, уязвимости неавторизованной произвольной загрузки файлов в плагине AI Engine: ChatGPT Chatbot для WordPress,...

CVE-2019-11231-PoC

GetSimpleCMS CVE-2019-11231 RCE эксплойт Эксплойт удалённого выполнения кода без аутентификации для GetSimpleCMS ≤ 3.3.15 Уязвимость GetSimpleCMS публично раскрывает конфиденциальные файлы /data/other/authorization.xml, /data/users/, что позволяет злоумышленникам: 1. Получать API-ключи и имена...

CVE-2025-14598

CVE-2025-14598 CVSS: 9.8 Injection SQL non authentifiée à distance menant à l'exécution de code à distance. Résumé exécutif Une vulnérabilité d'injection SQL a été identifiée dans la fonctionnalité de connexion de BET e-Portal, une solution logicielle largement déployée dans les établissements...