CVE-2021-41773---Apache-Path-Traversal---RCE

CVE-2021-41773 — Apache路径遍历与远程代码执行 实习任务: ITSOLERA PVT LTD — 攻击性安全 实习生: Areeba Zehra Jafri 团队负责人: Muhammad Ahsan Ayaz 日期: 2026年3月18日 概述 对CVE-2021-41773的研究与利用——Apache HTTP Server 2.4.49中的路径遍历与远程代码执行漏洞。 文件 CVE-2021-41773-Final-Report.docx — 完整利用报告 CVE-2021-41773-exploit.py — Python PoC利用脚本...

exploit-CVE-2017-7494

SambaCry RCE 漏洞利用（针对 Samba 4.5.9） Samba 是 SMB/CIFS 网络协议的自由软件重新实现。Samba 为各种 Microsoft Windows 客户端提供文件和打印服务，并可以集成到 Microsoft Windows Server 域中，既可以作为域控制器 DC，也可以作为域成员。自版本 4 起，它支持 Active Directory 和 Microsoft Windows NT 域。 4.5.9 版本及之前的 Samba 存在一个名为 SambaCry 的远程代码执行漏洞。CVE-2017-7494...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Repositorio original : https://github.com/CsEnox/Gitlab-Exiftool-RCE Créditos a CsEnox. Exploit de RCE para Gitlab 13.10.3 GitLab Workhorse pasará cualquier archivo a ExifTool. El error actual está en el módulo DjVu de ExifTool. Cualquier persona con la capacidad de subir una...

CVE-2018-10933

POC de CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en un acceso no autorizado. Uso : python3 libssh.py -...

CVE-2020-8840

CVE-2020-8840 环境 jdk 8u161 windows10 1903 步骤 1.创建一个名为Exploit.java的Java文件，写入你想执行的代码并编译它 2.使用Python或其他工具在与类文件相同的目录下创建一个HTTP服务器 3.使用marshalsec创建一个LDAP服务器：java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer http://localhost:8080/Exploit...

CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

CVE-2026-88772

A memory overflow vulnerability (CWE-119) in the DTLS record handling routine on UDP/443 allows unauthenticated Remote Code Execution (RCE) or Denial of Service (DoS) in Citrix NetScaler ADC and NetScaler Gateway . The flaw is triggered by processing malformed DTLS packets; notably, DTLS is enabl...

EUVD-2026-87959

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...

CVE-2025-46157

CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 远程代码执行与权限提升 摘要 在 Timetrax V1 2025 中发现了一个严重漏洞，允许经过身份验证的用户绕过文件上传限制并实现远程代码执行 RCE 。该问题存在于考勤模块的请假申请表单 中，由于服务器端验证薄弱，攻击者可以通过修改请求上传恶意的 .asp Web Shell。 进一步利用可通过滥用 SeImpersonatePrivilege 使用 EfsPotato 技术实现权限提升至 SYSTEM 。 漏洞详情 ✅ 远程代码执行 RCE 组件： 考勤模块中的请假申请表单 原因：...

CVE-2026-58138

🚨 CVE-2026-58138 — Ejecución Remota de Código No Autenticada 🔥 Ejecución Remota de Código Crítica No Autenticada en Conductor Versiones afectadas:3.21.21 → 3.30.2 📌 Resumen CVE-2026-58138 es una vulnerabilidad crítica de Ejecución Remota d...

CVE-2021-1675

🖨️ CVE-2021-1675 — PrintNightmare Windows Print Spooler RCE/LPE Tipo: Prueba de Concepto — Simulada No Funcional CVE: CVE-2021-1675 + CVE-2021-34527 CVSS: 7.8 LPE / 8.8 RCE Alias: PrintNightmare Parcheado: Junio/Julio 2021 — KB5004945 Añadido al CISA KEV: Julio 2021 ⚠️ El payload de este PoC es...

CVE-2023-4220

Chamilo LMS 未认证远程代码执行漏洞利用 CVE-2023-4220 概述 本仓库包含一个 Bash 脚本，通过任意文件写入利用 Chamilo LMS 中的未认证远程代码执行 RCE 漏洞。该漏洞编号为 CVE-2023-4220。此利用方式允许攻击者通过上传恶意 PHP 文件在目标服务器上执行任意命令。 前提条件 易受攻击的 Chamilo LMS 实例。 用于捕获反向 shell 的监听器（例如使用 Netcat）。 漏洞详情 漏洞 : CVE-2023-4220 来源 : StarLabs Advisory 使用方法 1. 克隆仓库 ： git clone...

go-get-rce

This repository does not have a README...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 RCE Autenticado Linux/POSIX Este repositorio contiene un script Proof of Concept PoC para CVE-2024-2044 , una vulnerabilidad crítica que combina Authenticated Path Traversal y Unsafe Deserialization en pgAdmin 4 versión 8.3 e inferiores ejecutándose en entornos...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 Análisis de la vulnerabilidad de carga de archivos Ubicación de la vulnerabilidad Ubicación de la vulnerabilidad: ht-contactform/admin/Includes/Services/FileManager.php Función clave: tempfileupload 1. Punto principal de la vulnerabilidad: función...

CVE-2024-34102

Cosmic Sting: Explotador de CVE-2024-34102 Cosmic Sting es una herramienta basada en Go diseñada para explotar CVE-2024-34102, una vulnerabilidad de ejecución remota de código. Detalle de CVE-2024-34102 Las versiones de Adobe Commerce 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores se ven...

CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated...

CVE-2026-88771

Citrix NetScaler ADC and NetScaler Gateway are vulnerable to a critical improper input validation vulnerability (CWE-20). This flaw allows an unauthenticated attacker to execute arbitrary commands remotely. The issue impacts all deployments, including those in default configuration , with no addi...