TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 Un laboratorio interattivo che mostra la vulnerabilità RCE non autenticata di Confluence Server e Data Center. Attività 1 Introduzione Confluence | Your Remote-Friendly Team Workspace | Atlassian NV...

CVE-2024-1212

CVE-2024-1212 - Unbefugte Befehlseinschleusung in Progress Kemp LoadMaster Dies ist ein Exploit-Skript für CVE-2024-1212 , eine Schwachstelle zur unbefugten Befehlseinschleusung in Progress Kemp LoadMaster. Zusammenfassung der Schwachstelle CVE-2024-1212 betrifft Progress Kemp LoadMaster und...

Metasploit-Wordpress-Canto-Exploit-RCE

Modulo exploit Metersploit canto RCE CVE-2024-25096 e CVE-2023-3452 Questo exploit è un proof-of-work delle vulnerabilità RFI CVE-2024-25096 e CVE-2023-3452, che consentono all'attaccante di stabilire una sessione interattiva di shell remota sul target. CVE-2024-25096 abusa del parametro abspath,...

CVE-2018-14083

CVE-2018-14083...

CVE-2021-30461

Produits impactés VoIPmonitor 24.60 Comment exécuter une RCE root@kitploit: python3 CVE-2021-30461.py -t ipaddress Shell navigateur : root@kitploit: http://x.x.x.x/namrlblgel.php?a=whoami Référence https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

CVE-2026-41179

CVE-2026-41179 — rclone RC API बिना प्रमाणीकरण के RCE ⚠️ केवल शैक्षणिक उद्देश्यों के लिए यह रिपॉजिटरी विशेष रूप से सुरक्षा अनुसंधान, शिक्षा और अधिकृत प्रयोगशाला वातावरण के लिए है। PSSec और इस रिपॉजिटरी के योगदानकर्ता किसी भी अनधिकृत, अवैध या दुर्भावनापूर्ण उपयोग का समर्थन, अनुमोदन या कोई जिम्मेदार...

proxylogon-exploit

proxylogon Proof-of-concept-Exploit für CVE-2021-26855 und CVE-2021-27065, der eine nicht authentifizierte Remote-Codeausführung auf Microsoft Exchange ermöglicht, wie in den folgenden Ressourcen beschrieben: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Um SSTI não autenticado no Rejetto HTTP File Server HFS. PoC do descobridor original: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Testado nas versões: 2.4.0 RC7, 2.3m Exemplo de uso: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload...

CVE-2026-76639

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability scored CVSS 8.8 (HIGH) . An attacker on an adjacent network can chain three weaknesses—an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key with world-readable permissio...

CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-42945-POC

CVE-2026-42945 Prova di concetto RCE per CVE-2026-42945 , un overflow critico del buffer heap nel ngxhttprewritemodule di NGINX introdotto nel 2008. Il bug consente esecuzione di codice remoto non autenticato contro server che utilizzano le direttive rewrite e set. Questa vulnerabilità — insieme ...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector RCE non autenticata PoC per esecuzione di codice in remoto non autenticata per CVE-2026-23744. MCPJam Inspector 1.4.2 e versioni precedenti espongono funzionalità tramite /api/mcp/connect che possono avviare un comando server MCP controllato dall'attaccante senza...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC La vulnerabilità consente a un aggressore con accesso di rete a un server SSH Erlang/OTP di eseguire codice arbitrario senza previa autenticazione. Descrizione È stata identificata una grave vulnerabilità nel server SSH Erlang/OTP che potrebbe consentire a un...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton: bypass dell'autenticazione SageMaker verso RCE non autenticata Gli attaccanti non autenticati possono raggiungere la superficie di gestione dei modelli di NVIDIA Triton Inference Server sulle porte HTTP SageMaker e Vertex AI, aggirando la configurazione...

CVE-2017-7269

CVE-2017-7269 - Overflow del buffer WebDAV di IIS 6.0 Un'implementazione in Rust del POC per CVE-2017-7269, che prende di mira il servizio WebDAV in Microsoft Internet Information Services IIS 6.0. Panoramica della vulnerabilità CVE-2017-7269 è una vulnerabilità critica di overflow del buffer...

drupalgeddon2-cli

drupalgeddon2-cli Una riscrittura da riga di comando del proof-of-concept di Drupalgeddon2 CVE-2018-7600 , realizzata come esercizio di studio mentre completavo il modulo Attacking Common Applications della Hack The Box Academy. !WARNING Solo per test di sicurezza autorizzati e a scopo didattico...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

EUVD-2026-67078

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735

UI-TARS-desktop (ByteDance) — the mcp-http-server package defaulted its listen address to :: when no host was supplied, binding Streamable HTTP and SSE MCP transports to every network interface. Authentication middleware was optional, and the @agent-infra/mcp-server-commands and @agent-infra/mcp-...

EUVD-2026-67024

ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication. The executor behind the pythoncodeexecutor tool, in pythonexecutortool.py, inspected the submitted source for a denied list of attribute names and calls but left the...