CVE-2025-64155

CVE-2025-64155: Inyección de Argumentos en Fortinet FortiSIEM para Ejecución Remota de Código Exploit de prueba de concepto para Fortinet FortiSIEM que abusa de una inyección de argumentos para escribir un archivo y obtener ejecución de código como root Blog Post Análisis en profundidad aquí:...

CVE-2025-63296

CVE-2025-63296 Resumen KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contiene una vulnerabilidad de ejecución de código en su lógica de arranque/actualización: durante el inicio, /usr/sbin/anykaservice.sh escanea las tarjetas TF/SD montadas y, si /mnt/update.nor.sh está...

CVE-2017-1000117-test

How it works This operates using the CVE-2017-1000117 vulnerability. When you clone this repository with root privileges using the git command with the --recurse option, an HTTP server that listens on port 12345 will run automatically. To stop the HTTP server, find its process ID and kill it...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC This repo contains a PoC of the recently discovered race condition vulnerability affecting COW on XFS reported by the excellent Qualys Security Team. 1 2 PoC info Handwritten based off of the excellent analysis in the Qualys advisory. Rewrites the first 4KB of the...

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...

cve-2019-7192-check

Comprobador de RCE root sin autenticación en QNAP CVE-2019-7192 CVE-2019-7195 Uso: root@kitploit: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Ejemplo de archivo de entrada: root@kitploit: 1.2.3.4 8080 2.3.4.5 443 Esta herramienta toma una lista de IPs y puertos d...

CVE-2019-7192_QNAP_Exploit

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: root@kitploit: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The...

CVE-2019-8627

CVE-2019-8627 una fuga de información del kernel en macOS = 10.14.4 =============================== Cómo reproducir: 1. activa el firewall 2. ejecuta la prueba de concepto como root 3. desconecta la red Belkin USB-C LAN y luego conecta la red Belkin USB-C LAN. después de estas operaciones obtendr...

CVE-2025-65817

CVE-2025-65817 Fields| Value ---|--- Titre| Vulnerability Report: LSC Smart Connect Camera Date| 2024-02-15 Description| Abusing the SD-card update hook to spawn remote shells on LSC Smart Connect cameras. Tags| iot, vulnerability, cve Firmware| 1.14.13 Vulnerability Report on LSC Smart Connect...

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

CVE-2021-40222

CVE-2021-40222 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Remote Code Execution Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input o...

osx-password-dumper

🍎 🔓 Script de Volcado de Contraseñas de OSX Descripción general Un script bash para recuperar archivos .plist de usuarios en un sistema macOS y convertir los datos internos a un formato de hash cracksable. para usar con John The Ripper o Hashcat Útil para CTFs/Pentesting/Red Teaming en sistemas...

root-my-webos-tv

Rootear mi TV webOS Un script simple de Python que inicia un servidor telnet en dispositivos webOS vulnerables como root. Televisores verificados webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS...

SmmBackdoor

SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...

CVE-2022-27251

CVE-2022-27251 Ejecución remota de código en LocalStack 0.12.6 Debido a la falta de sanitización de la entrada del usuario en el campo del controlador de la API de Lambda al generar funciones Lambda, y a la forma insegura en que se generan los contenedores Docker, se puede proporcionar una...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...

DIR8xx_PoC

phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...

CVE-2025-20393

CVE-2025-20393 📌 Descripción general CVE-2025-20393 es una vulnerabilidad crítica de Ejecución Remota de Comandos RCE que afecta a los equipos Cisco Secure Email Gateway SEG y Cisco Secure Email and Web Manager SEWM que ejecutan Cisco AsyncOS. La vulnerabilidad existe debido a una validación de...

cve-2026-31431

CVE-2026-31431 Copy Fail Test This repository contains a workflow file for GitHub Actions to test whether the action runner is affected by CVE-2026-31431. You can do the test by yourself, just create a repository by this template and trigger the test.yml workflow manually remember to change the o...