CVE-2021-21551

Exploit CVE-2021-21551 for LPE by creating System cmd Tested on Windows 11 21H2 22000.1335...

Nginx-chain-Rift-Poolslip

nginx PoolSlip × Rift — ASLR-independent RCE chain First public chain of two recently-disclosed nginx rewrite-engine bugs into a single ASLR-independent remotesystem on the stock officialnginx:1.30.0 Docker image Debian 13, glibc 2.41 — no hardcoded addresses, no nginx restart, 90 % per fresh...

FreeSWITCH - /api/system Command Execution (CVE-2018-19911)

Exploits CVE-2018-19911 by passing OS commands to /api/system/?. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """FreeSWITCH /api/system RCE CVE-2018-19911 — opens execute session.""" import re from urllib.parse import quote from kittysploit import from...

CVE-2026-24105

The Tenda AC15V1.0 wireless router is vulnerable to a command injection flaw in the goform/formsetUsbUnload component. The root cause is the lack of validation for the v1 parameter, which is subsequently passed to the doSystemCmd function. An attacker could exploit this to execute arbitrary comma...

Z-BlogPHP Input Validation Error Vulnerability

Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. An information disclosure vulnerability exists in Z-BlogPHP, which stems from a configuration error in Open Redirect in Z-BlogPHP v1.5.2 and earlier versions. The vulnerability can be exploited to obtain sensitive...