CVE-2026-73736

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory...

CVE-2026-73734

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

CVE-2026-73721

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

CVE-2026-73720

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-73716

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73722

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-73717

A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-73711

A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...

CVE-2026-73712

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

CVE-2026-73715

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface...

AZL-98451 CVE-2026-72649 affecting package rubygem-elasticsearch 8.9.0-1

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

CVE-2026-72649

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

CVE-2022-1329

Plugin WordPress - Elementor 3.6.0 3.6.1 3.6.2 Exécution de code à distance root@kitploit: Ngày: 16 tháng 4 năm 2023 Khai thác Tác giả: Việt Hùng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://elementor.com/ Link phần mềm: https://wordpress.org/plugins/elementor/advanced...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload Visitez https://phankz.com...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 — удалённое выполнение кода RCE с аутентификацией root@kitploit: Дата: 05 ноября 2023 г. Автор эксплойта: Việt HÙng https://github.com/phanthibichtram12 Домашняя страница поставщика: https://www.wpallimport.com/ Ссылка на ПО:...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploitation de la vulnérabilité d'exécution de code à distance CVE-2024-7954 Projet de test de vulnérabilité logicielle Soumis par : Shivansh Kuntal Aperçu Ce projet démontre l'exploitation de CVE-2024-7954 , une vulnérabilité critique d'exécution de code à distance RCE affectant SPIP CMS via so...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE 익스플로잇 작성자: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 이 저장소는 CVE-2024-51791에 대한 개념 증명 익스플로잇을 포함합니다. 이 취약점은 취약한 WordPress 폼 플러그인에서 인증 없이 임의의 파일을 업로드할 수 있게 하여 원격 코드 실행RCE으로 이어집니다. 스크립트가 수행하는 작업 이 스크립트는 인증 없이 취약한 폼 엔드포인트를 통해 PHP 페이로드를 업로드합니다...

CVE-2016-16113-POC

Get RCE - Exploit pour Bludit CMS root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Un outil d'exploitation automatisé qui combine CVE-2019-17240 contournement d'authentification et CVE-2019-16113 téléchargement arbitraire de...

RCE-Exploit-Framework

RCE-Exploit-Framework Ce framework est conçu pour aider les testeurs d'intrusion ou les développeurs à comprendre les mécanismes de l'exploitation de l'exécution de code à distance RCE. Fonctionnalités Générateur de payloads : Prend en charge la création de payloads personnalisés basés sur Python...

react2shell-security-toolkit

🛡️ Kit de sécurité React2Shell Kit de sécurité pour détecter et atténuer la vulnérabilité CVE-2025-55182 React2Shell ⚠️ CRITIQUE : Cette vulnérabilité CVSS 10.0 est activement exploitée ! Démarrage rapide root@kitploit: npm install -g react2shell-security-toolkit npx react2shell-check Qu'est-ce que...