CVE-2026-22356

CVE-2026-22356: Jetpack CRM 路径遍历漏洞和远程代码执行 警告： 此工具仅应用于授权的测试环境。非法使用完全由用户负责。 📥 要求 root@kitploit: pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target is VULNERABLE to LFI! Attempting Log Poisoning for RCE... Searching for accessible log files... Trying:...

EUVD-2026-84534

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...

CVE-2026-94640

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 存在于 ClamAV 的 DMG 文件解析器中的信息泄露漏洞 ClamAV 1.0.0 及更早版本、0.105.1 及更早版本以及 0.103.7 及更早版本中的 DMG 文件解析器存在一个漏洞，可能允许未经身份验证的远程攻击者访问受影响设备上的敏感信息。该漏洞是由于启用了 XML 实体替换，可能导致 XML 外部实体注入。攻击者可通过向受影响设备上的 ClamAV 提交特制的 DMG 文件进行扫描来利用此漏洞。成功利用后，攻击者可能泄露 ClamAV 扫描进程可读取的任何文件中的字节。 已在 Ubuntu 20.04 上测试...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC Este repositorio contiene un script de explotación en Python para la vulnerabilidad CVE-2022-36804 de Atlassian Bitbucket Server/Data Center. El problema es una falla de inyección de comandos en el flujo de archivado de Git, donde los parámetros prefix manipulados...

CVE-2026-61612

creationtimestamp| type| source ---|---|--- 2026-09-22 15:32:08+00:00| seen| https://gist.github.com/alon710/3ba8e1fcc936f8ea3f0b915b4e9e571b 2026-09-22 16:35:02+00:00| published-proof-of-concept| https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-

Explotación de Vulnerabilidad BlueKeep CVE-2019-0708 en Entorno Controlado Proyecto académico enfocado en el análisis, ejecución y resolución de problemas durante la explotación de la vulnerabilidad BlueKeep CVE-2019-0708 en el servicio RDP de Windows Server 2008 R2, desarrollado para la asignatu...

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: 基于SMB协议漏洞的Windows操作系统攻击 1. 描述 2. 概述 3. 准备 4. 实施攻击 5. 防御方法 1. 描述 在本实验中，我们将使用两台计算机模拟基于Windows操作系统SMB协议漏洞的攻击。一台运行Kali Linux操作系统，扮演攻击者（黑客）。另一台计算机扮演受害者（victim）。受害机器运行的是包含SMB漏洞的Windows 7 64位操作系统。为此，我们将在Kali Linux机器上使用名为 EternalBlue 的漏洞利用代码攻击Windows 7机器。 2. 概述 Server Message Block...

Telerik_CVE-2019-18935

TelerikUI Python 扫描器 telerikrcescan.py 示例 评估 IP 是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -t 192.168.44.21 评估主机名是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -t vulnerable.telerik.net 评估 CIDR 网络范围是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -r 23.253.4.0/24 评估目标列表 $ python3...

mgo3-rce

MGO3 RCE This repository contains information regarding CVE-2026-19874. documentation video demo Timeline 2026-06-26: vulnerability is discovered 2026-06-26: first contact with Konami 2026-07-01: vulnerability is reported to Konami 2026-08-04: vulnerability is silently patched by Konami...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit 模块 概述 这是针对 CVE-2015-1578 的一个 Metasploit 模块，该漏洞是 Windows 上 Achat 0.150 beta7 中的一个缓冲区溢出漏洞。利用该漏洞可通过特制的 UDP 数据包实现远程代码执行。 目的 本模块旨在作为 Metasploit 漏洞利用开发的一个简洁、最小且结构良好的示例。它演示了： 通过 msfvenom 动态生成 Unicode 编码的 shellcode 手动注入 payload（绕过 Metasploit 内部的 payload 编码器） 基于 UDP 的简单投递机制...

cve-2022-41352-zimbra-rce

Este repositorio no tiene un README...

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

EUVD-2026-84523

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location...

CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location...

CVE-2026-80156

Lantronix autonomous out-of-band devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a path traversal vulnerability in the web management portal upload endpoint. The root cause is that the filename validation strips backslash characters but fails to subsequently check fo...

CVE-2026-4253-Scanner

CVE-2026-42530 — Escáner Safe-Check Escáner masivo no destructivo para el use-after-free de NGINX HTTP/3 QUIC Inventario de qué hosts están expuestos — sin desencadenar el fallo. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas — tu propia infraestructura o sistemas...

CVE-2026-80155

Lantronix SLC8000 (before firmware v9.7.0.5 ), EMG8500/EMG7500 (before v9.7.0.1 ), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by an unauthenticated authentication bypass in the web management portal upload endpoint. The root cause is a snprintf call with a fixed-size buffer ...

EUVD-2026-84521

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpoint that allows unauthenticated attackers to read sensitive configurati...