CobaltStrikeDos

Eine Denial-of-Service-Sicherheitslücke DoS CVE-2021-36798 wurde in Cobalt Strike gefunden. Die Sicherheitslücke wurde im Rahmen des 4.4 Releases behoben. Weitere Informationen finden Sie here Verwendung root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3...

Exploit for CVE-2025-10952

CVE-2025-10952 — ml-logger streamhandler Arbitrary File Rea...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 Benutzernamen-Enumeration – PoC Proof-of-Concept-Skript zur Demonstration einer Benutzernamen-Enumeration-Schwachstelle in Silverpeas Versionen 6.4.1 und 6.4.2. Details zur Schwachstelle Betroffene Software: Silverpeas Betroffene Versionen: 6.4.1, 6.4.2 und...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 – Social Warfare WordPress Plugin RCE Dieses Repository enthält einen funktionierenden Python-Exploit für CVE-2019-9978, eine Remote Code Execution-Schwachstelle im Social Warfare Plugin für WordPress Version = 3.5.2. Beschreibung Der Parameter swpdebug in admin-post.php erlaubt es...

Silverpeas-AuthBypass-CVE-2024-36042

Silverpeas-AuthBypass-CVE-2024-36042 Ein sauberer, professioneller Python3-Proof-of-Concept für CVE-2024-36042 – eine Authentifizierungsumgehung in Silverpeas 6.3.5, die durch fehlende Passwortvalidierung in AuthenticationServlet verursacht wird. Übersicht Silverpeas AuthenticationServlet...

CVE-2022-22980

SpEL RCE Exploit - CVE-2022-22980 Exploit für die Ausführung von Remotecode RCE auf Spring Data über eine SpEL-Injektion Spring Expression Language. Beschreibungen Schwachstelle Die Box stellt einen Endpunkt /search bereit, der einen Parameter trackingid akzeptiert, der anfällig für SpEL-Injektio...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell Descrizione Questo script è uno strumento di penetration testing progettato per sfruttare la vulnerabilità CVE-2022-42889, nota anche come Text4Shell, in Apache Commons Text versioni -param $PARAMETER -L $LHOST -P $LPORT...

CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python-Wrapper für sqlmap konzipiert zur Ausnutzung von CVE-2024-51428 in ZoneMinder. Dieses Tool automatisiert die Erkennung und Ausnutzung einer Blind SQL Injection -Schwachstelle, während die Ausgabe sauber und auf nützliche Daten fokussiert...

AZL-98190 CVE-2026-80717 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

DEBIAN-CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

AZL-98060 CVE-2026-80708 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

DEBIAN-CVE-2026-80708

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

CVE-2026-80708

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

DEBIAN-CVE-2026-80607

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

CVE-2026-80607

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

AZL-98048 CVE-2026-80607 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARNONONCE from parsebtfarg Sashiko found that user can cause this WARNONONCE easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove t...

CVE-2026-5097

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2026-4246

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and including, 4.10.1 due to insufficient input sanitization and output escaping. The REST endpoint at...

CVE-2020-24186

CVE-2020-24186 Dieses Skript nutzt die Schwachstelle CVE-2020-24186 in WordPress aus, um eine getarnte PHP-Nutzlast hochzuladen und eine Shell auf dem Zielsystem zu erhalten. Es gibt drei Betriebsmodi: 1. Interaktive Shell: Lädt die Basis-Webshell hoch und wechselt in einen interaktiven Modus, in...