992548 matches found
React2ShellPoC
Understanding CVE-2025-55182 React2Shell: A Deep Dive into Remote Code Execution via React Server Components Overview CVE-2025-55182, also known as React2Shell , is a critical remote code execution RCE vulnerability affecting React Server Components. This flaw enables unauthenticated attackers to...
n8n_CVE-2025-68613_exploit_payloads
n8nCVE-2025-68613exploitpayloads Expression injection payloads for n8n CVE-2025-68613 RCE LEGAL DISCLAIMER: This content is for educational purposes only. Author bears no responsibility for damages, misuse, or unauthorized exploitation of CVE-2025-68613. Test solely in isolated lab environments o...
CVE-2026-84287
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...
CVE-2026-73782
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-73779
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...
CVE-2026-73765
Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...
CVE-2026-73759
Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...
CVE-2026-73750
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...
CVE-2026-73749
Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...
CVE-2026-73752
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...
CVE-2026-71981
Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the backquery GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload...
CVE-2025-24893
CVE-2025-24893 – XWiki Remote Code Execution RCE Overview CVE-2025-24893 is a critical unauthenticated Remote Code Execution RCE vulnerability in XWiki , a widely used open-source enterprise wiki platform. The flaw exists in the SolrSearch macro, which improperly evaluates Groovy expressions...
bpnd-libssh
bpnd-libssh blueintel bpnd-libssh एक बहु-थ्रेडेड, रिमोट स्कैनर है CVE-2018-10933 के लिए। आवश्यकताएँ python3 paramiko module स्थापना उदाहरण: root@kitploit: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko डॉकर के साथ स्थापना डॉकर कंटेनर बनाने के लिए: root@kitploit:...
disable-RegisterSpoolerRemoteRpcEndPoint
disable-RegisterSpoolerRemoteRpcEndPoint Windows प्रिंट स्पूलर रिमोट कोड निष्पादन भेद्यता CVE-2021-34527 के लिए वर्कअराउंड। देखें: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 अपडेट 2021-07-08: माइक्रोसॉफ्ट ने एक पैच जारी किया माइक्रोसॉफ्ट ने इस भेद्यता के लिए पहले ही एक प...
refreshing-soap-exploit
यह CVE-2022-41622 के लिए एक प्रूफ ऑफ कॉन्सेप्ट है, जो F5 Big-IP में एक CSRF है जो रिमोट कोड निष्पादन की ओर ले जाता है। इसका उपयोग करना थोड़ा पेचीदा है, लेकिन मैं आपको अपने पसंदीदा उपयोग-मामलों के बारे में बताऊँगा। भेद्यता मुख्य भेद्यता F5 Big-IP के SOAP इंटरफ़ेस में एक क्रॉस-साइट अनुरोध जालसाजी...
CVE-2026-84288 NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...
CVE-2026-84288
NousResearch hermes-agent (up to version 0.18.2) contains a denial of service vulnerability in the HermesACPAgent.prompt function located in acp_adapter/session.py (ACP Prompt Workflow component). The attack can be performed remotely with low privileges and no user interaction required. A proof-o...
CVE-2002-0082
Fix : https://www.exploit-db.com/exploits/764 : Apache modssl 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow 1 Credit : https://blog.hypn.za.net/2017/08/27/compiling-exploit-764-c-in-2017/ Dont forget to: apt-get install libssl-dev Compile: gcc -o 764 764.c -lcrypto...
exploit-CVE-2025-49113
CVE-2025-49113 PoC Repository Overview of CVE-2025-49113 CVE-2025-49113 is a critical vulnerability affecting Roundcube Webmail versions prior to 1.5.10 and 1.6.11. Discovered in 2025, this flaw allows remote code execution RCE through PHP Object Deserialization in the /settings/upload.php...