583 matches found
CVE-2025-53770
CVE-2025-53770 – Microsoft SharePoint Server 2019 RCE non autenticata tramite deserializzazione Autore dell'exploit: Agampreet Singh Strumento: RedRoot https://github.com/Agampreet-Singh/RedRoot Data: 7 agosto 2025 Testato su: SharePoint Server 2019 v16.0.10383.20020 su Windows Server 2019 ID CVE...
Room-Walkthrough-Billing
🧠 Walkthrough della Stanza: Billing Scritto da: Aditya Bhatt | Contributore Open Source 📦 Panoramica In questo walkthrough, ci immergiamo completamente nella Stanza Billing , mostrando un'istanza vulnerabile di MagnusBilling, un succulento RCE non autenticato CVE-2023-30258, e una misconfigurazio...
spip-cve-2023-27372-rce
SPIP CVE-2023-27372 Exploit de RCE Não Autenticado Upload de Web Shell Este script Python explora a CVE-2023-27372, uma vulnerabilidade de execução remota de código não autenticada no SPIP CMS em versões anteriores à 4.2.1. Ele aproveita uma falha de envenenamento de cache no mecanismo de...
WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability
Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...
wp2shell-vulnerability-scanner
WP2Shell Scanner A read-only, non-destructive security audit tool that scans WordPress installations for the wp2shell vulnerability chain. Panoramica WP2Shell Scanner è un'utilità bash che ricerca ricorsivamente un albero di directory per installazioni WordPress e verifica se ciascun sito esegue...
zoneminder_CVE-2023-26035
Exploit - ZoneMinder CVE-2023-26035 Esiste una Esecuzione di codice in remoto non autenticata RCE che colpisce gli Snapshot di ZoneMinder. Questo è un exploit per CVE-2023-26035. Versioni affette ZoneMinder 1.36.33 e ZoneMinder 1.37.33. Utilizzo Verifica se il target è vulnerabile: root@kitploit:...
CVE-2026-47668
CVE-2026-47668 Nicht authentifizierte RCE in DBGate = 7.1.8 REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py Minimale Implementierung von RCE auf /runners/start, Privilegiert Wenn der Prozess in den Ordner...
Chamilo-CVE-2023-4220-RCE-Exploit
CVE-2023-4220 Chamilo LMS Unauthentifizierter Remote-Code-Ausführung durch großen Datei-Upload Überblick Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für die als CVE-2023-4220 identifizierte Sicherheitslücke in Chamilo LMS. Dieser Exploit macht sich eine nicht authentifizierte...
dsh2shell
dsh2shell Unauthenticated RCE PoC for expo...
Exploit for CVE-2026-58455
CVE-2026-58455 — Dockwatch Unauthenticated RCE auth bypass +...
CVE-2026-18268
Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...
CVE-2026-76314
CVE-2026-76314 is a Remote Code Execution vulnerability in Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . A user without the admin or power role can achieve RCE by submitting crafted Splunk Web Manager Configuration content. The root cause is twofold: Splunk Web evaluates m...
CVE-2026-63722
ICEcoder 8.1 is vulnerable to unauthenticated remote code execution via the terminal-xhr.php endpoint. Attackers chain three flaws: a password parameter bypasses authentication, a non-empty csrf parameter skips CSRF validation, and an arbitrary command string is passed directly to proc_open(), yi...
CVE-2026-73902
creationtimestamp| type| source ---|---|--- 2026-08-19 17:17:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-73343
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-32444 WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...
CVE-2026-74253
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...
CVE-2026-74253
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...
CVE-2025-27772 Uptrain vulnerable to remote code execution via `/new_run` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...