CVE-2023-27372-POC

CVE-2023-27372-POC Übersicht Dieser Code ist ein Python-POC Proof of Concept zur Erkennung, ob die Zielwebsite die Schwachstelle CVE-2023-27372 aufweist. Sie können den Code ausführen, indem Sie eine einzelne URL oder eine Textdatei mit mehreren URLs angeben. Betroffene Versionen: SPIP ";...

CVE-2025-24813-Scanner

CVE-2025-24813 Scanner Um scanner de vulnerabilidades multi-thread para detectar servidores Apache Tomcat vulneráveis ao CVE-2025-24813 upload arbitrário de arquivos que leva a RCE. Descrição Este scanner verifica servidores Apache Tomcat vulneráveis ao CVE-2025-24813 ao: 1. Tentar enviar um obje...

CVE-2022-30778

चेतावनी भेद्यता को रद्द कर दिया गया है Override यह CVE-2021-43503 के बारे में है। आवश्यकता PHP = 8.0 Composer भेद्यता पुन: उत्पन्न करें 1. सेवा प्रारंभ करें root@kitploit: composer install cp .env.example .env php artisan key:generate php artisan serve it will listening 8000 port in localhost 2...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java-Deserialisierungs-Exploit Dieses Skript automatisiert die Ausnutzung einer Java-Deserialisierungsschwachstelle in Oracle PeopleSoft, die ursprünglich von Vahagn Vardanyan entdeckt wurde. Dieser Exploit benötigt ysoserial.jar, um...

CVE-2017-1000353

CVE-2017-1000353 POC Como reproduzir o Jenkins CVE-2017-1000353？ Clone este repositório, use o payload pré-construído jenkinspoc.ser com o seguinte comando: root@kitploit: python exploit.py http://your-ip:8080 jenkinspoc.ser Então o comando touch /tmp/success será executado. Requisitos de Versão ...

FallingSkies-CVE-2023-35885

CVE-2023-35885 Cloudpanel 0-day शोषण लेखक: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ प्रभावित संस्करण: v2.0.0 – v2.3.0 पैच किया गया संस्करण: v2.3.1 विक्रेता होमपेज: CloudPanel.io उत्पाद: CloudPanel संदर्भ:...

CVE-2020-2555

CVE-2020-2555 http://1984-0day.com https://www.youtube.com/watch?v=VzmZTYbm4Zw root@kitploit: python CVE-2020-2555.py ip port test.ser...

CVE-2025-1913-PoC

CVE-2025-1913 -- Prova de Conceito PoC Este repositório contém uma Prova de Conceito PoC apenas educacional para CVE-2025-1913 , criada por Suhaib518 🇸🇦. Esta PoC demonstra como uma entrada PHP serializada especialmente manipulada pode acionar lógica vulnerável em componentes afetados do WordPress...

cve-2022-32224-rails

CVE-2022-3222 Verificación del comportamiento de serialización de ActiveRecord https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017...

weblogic_cve-2019-2890

1）Öffne das XXER-Tool python xxer.py -H 192.168.17.223 2）Lege den xxer-PoC in die Datei xx.xml，ersetze die serialisierten Daten und injiziere den xxer-PoC； java -jar weblogicxxe.jar xx.xml 3）Sende Daten mit weblogic.py aus dem java-deserialization-exploit-Tool an den WebLogic-Server python...

CVE-2022-2992

CVE-2022-2992 Esecuzione remota di comandi autenticata in GitLab tramite importazione da GitHub. Una vulnerabilità in GitLab CE/EE che interessa tutte le versioni dalla 11.10 precedenti alla 15.1.6, tutte le versioni a partire dalla 15.2 precedenti alla 15.2.4, tutte le versioni a partire dalla...

CVE-2022-2992

CVE-2022-2992 GitHub import के माध्यम से GitLab में प्रमाणित रिमोट कमांड निष्पादन। GitLab CE/EE में एक भेद्यता जो 11.10 से आरंभ होकर 15.1.6 से पहले तक के सभी संस्करणों, 15.2 से आरंभ होकर 15.2.4 से पहले तक के सभी संस्करणों, 15.3 से आरंभ होकर 15.3.2 से पहले तक के सभी संस्करणों को प्रभावित करती है। ...

CVE-2026-73426

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73426 Trix: Stored XSS vulnerability through serialized attributes

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73426

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2026-73426

Trix (a WYSIWYG rich text editor by Basecamp) versions prior to 2.1.17 are vulnerable to stored cross-site scripting (XSS) . The root cause is a data-trix-serialized-attributes attribute that bypasses the DOMPurify sanitizer. An attacker can craft HTML containing this attribute with a malicious p...

CVE-2026-73426 Trix: Stored XSS vulnerability through serialized attributes

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...

CVE-2025-7639

The vulnerability affects AVEVA Enterprise SCADA , a SCADA system deployed in Critical Manufacturing sectors worldwide. The root cause is deserialization of untrusted data : an authenticated user with "DNA Authority - Operator" privilege can tamper with serialized data, triggering arbitrary code ...

CVE-2025-7639

The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Enterprise SCADA security group "DNA Apps"...

EUVD-2026-58283

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230. An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without...