CVE-2021-21972

CVE-2021-21972 脆弱性の説明 CVE-2021-21972 コード実行脆弱性 443ポートへのアクセス権限を持つ悪意のある攻撃者は、vCenter Serverに対して巧妙に細工されたリクエストを送信することで、最終的にリモートでの任意のコード実行を引き起こす可能性があります。 脆弱性の検出 1. 脆弱性は任意のファイルアップロードです 2. 脆弱性が存在するエンドポイントは /ui/vropspluginui/rest/services/uploadova， 完全なパス...

CVE-2026-86318

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-86319

A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...

DEBIAN-CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

CVE-2026-86317

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...

CVE-2026-79645

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...

CVE-2026-78480

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

CVE-2026-79644

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

AZL-99980 CVE-2026-18355 affecting package 389-ds-base 3.1.1-12

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

DEBIAN-CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2020-5902

요약 BIG-IP 버전 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 및 11.6.1-11.6.5.1에서 Traffic Management User InterfaceTMUI, 구성 유틸리티라고도 함에 공개되지 않은 페이지에서 원격 코드 실행RCE 취약점이 존재합니다. 크레딧: Positive Technologies의 Mikhail Klyuchnikov 개념 증명 root@kitploit:...

log4j2_vul_local_scanner

Log4j2 Vulnerability Local Scanner CVE-2021-45046 Локальный скрипт обнаружения уязвимости Log4j. Сканирует все java-процессы на хосте, проверяет, содержит ли он уязвимый jar-файл log4j-core, и возможна ли атака удаленного выполнения кода CVE-2021-45046. Загружает отчет сканирования на указанный...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084: удаленное выполнение кода на серверах Confluence. Поисковый запрос Fofa: app="ATLASSIAN-Confluence" Использование Показать справку. root@kitploit: python PoC.py Проверка уязвимости для отдельных сайтов. root@kitploit: python PoC.py -u https://1.1.1.1 Выполнение...

CVE-2022-30507-PoC

Описание удаленное выполнение кода RCE путем выполнения javascript-кода - межсайтовый скриптинг XSSи процесс рендеринга с помощью nodeintegration, который отвечает за процесс рендеринга и доступ к коду node js Видео PoC Ссылки...

CVE-2018-15133

CVE-2018-15133 Несериализованный RCE в Laravel pip install requests colorama multiprocessing...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry — HTB Этот репозиторий содержит файл кристаллографической информации CIF, предназначенный для использования на машине "Chemistry" на Hack The Box HTB. Пример CIF-файла root@kitploit: dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealp...

xwiki-cve-2025-24893-poc

XWiki RCE 익스플로잇 PoC CVE-2025-24893 개요 이 저장소는 CVE-2025-24893으로 식별된 XWiki 원격 코드 실행RCE 취약점에 대한 개념 증명PoC 익스플로잇을 포함합니다. 이 취약점은 공격자가 SolrSearch 엔드포인트에 조작된 요청을 보내 대상 XWiki 인스턴스에서 임의의 코드를 실행할 수 있도록 합니다. 이 스크립트는 HTTP 및 HTTPS 대상 모두를 지원합니다. ⚠️ 면책 조항 : 이 PoC는 교육 및 연구 목적으로만 제공됩니다. 명시적 허가 없이 시스템에 이 코드를 무단 사용하는...

CVE-2026-86321 java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jackson/JsonLoader.java of the component URL Validation. The manipulation results in server-side request forgery. It is possible t...