hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE भेद्यता भेद्यता विवरण हमलावर इस भेद्यता का उपयोग करके असीमित रूट शेल के साथ उपकरण का पूर्ण नियंत्रण ले सकते हैं, भले ही उपकरण का मालिक एक सीमित संरक्षित शेल psh तक सीमित हो। IP कैमरों में सेंध लगाने के अलावा, वे आंतरिक नेटवर्क तक पहुंच सकते हैं और उस पर हमला भी कर सकत...

CVE-2025-53770-Checker

CVE-2025-53770-Checker Checks if an on-premises SharePoint server is vulnerable to CVE-2025-53770 Non-intrusive detector of the CVE-2025-53770 vulnerability in SharePoint Server Development: Division81 ethical hacking team of Grupo Oruss Technical Description CVE-2025-53770 is a critical .NET...

CVE-2026-86124

AutoAgent (HKUDS/AutoAgent) contains an unauthenticated remote code execution vulnerability in its sandbox TCP command server . The server binds to all network interfaces and executes attacker-supplied commands as root without requiring authentication. An attacker who can reach the exposed commun...

EUVD-2026-71956

AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and executes attacker-supplied commands as root. Attackers can connect to the exposed communication port and execute arbitrary bash commands within the container, gaining acces...

CVE-2026-86121

Cua computer-server (by Cua, GitHub: trycua/cua) versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all network interfaces by default. This allows an unauthenticated attacker to reach TCP port 8000 and execute arbitrary shell commands via ...

EUVD-2026-71953

Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...

cve-2025-32433

Erlang/OTP SSH Unauthenticated Blind RCE CVE-2025-32433 PoC 📜 Description CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in Erlang/OTP's SSH server. Prior to the patched versions, the SSH daemon incorrectly processes channel messages before authentication is...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl पैनल बिना प्रमाणीकरण के RCE root@kitploit: / |\ \ / /| | | / | | | | || | / | || / | | \ V / | || / / | |/ / | | | | , /| || \ / / | / || /| //||/ || // ||/ /| Pterodactyl Panel ≤ 1.11.10 के लिए एक्सप्लॉइट - बिना प्रमाणीकरण के LFI से RCE तक। भेद्यता...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

قالب Nuclei لثغرة CVE-2022-1388: كشف واجهة BIG-IP iControl REST 06 مايو 2022 يتحقق هذا فقط من وجود واجهة برمجة التطبيقات API من خلال استدعاء نقطة نهاية المصادقة قد تسمح هذه الثغرة لمهاجم غير مصادق يمتلك وصولاً شبكيًا إلى نظام BIG-IP عبر منفذ الإدارة و/أو عناوين IP الذاتية بتنفيذ أوامر نظام عشوائي...

react2shell-scanner

react2shell-guard CVE-2025-55182 के लिए सुरक्षा स्कैनर - रिएक्ट सर्वर कंपोनेंट्स में एक गंभीर CVSS 10.0 अप्रमाणित रिमोट कोड निष्पादन भेद्यता। ⚠️ अस्वीकरण यह एक सुरक्षा स्कैनर है, एक शोषण उपकरण नहीं। इसे डेवलपर्स और सुरक्षा टीमों को उनके प्रोजेक्ट्स में कमजोर निर्भरताओं की पहचान करने में मदद करने क...

CVE-2019-15107-Exploit

استغلال CVE-2019-15107 بلغة بايثون هذا الاستغلال مخصص لـ CVE-2019-15107 Webmin 1.890-1.920 RCE دون مصادقة مُنفَّذ بلغة بايثون. الاستخدام root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

CVE-2017-11610

CVE-2017-11610 Supervisor 3.0a1 - 3.3.2 के लिए अप्रमाणित रिवर्स शेल RCE स्टैंडअलोन Python ≥3.6, Supervisor 3.0a1 से 3.3.2 के लिए अप्रमाणित RCE एक्सप्लॉइट, इस Metasploit मॉड्यूल से पुनर्लेखित। व्याख्यात्मक पोस्ट यहाँ। Python 3.7 के साथ इस लक्ष्य पर परीक्षण किया गया जो Supervisor 3.3.2 चला रहा है...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root Failed to change password : The current...

CVE-2021-3129

CVE-2021-3129 Unauthenticated RCE in Laravel Ignition via File Upload Summary of the CVE In affected versions of Laravel Ignition a attack can execute arbitrary code because of the insecure usage of filegetcontents and fileputcontents. This is only exploitable for websites that use debug mode...

CVE-2019-16920-MassPwn3r

0day exploit for Multiple D-Link Routers Vulnerability was found in latest firmware of the following D-Link products: DIR-655 DIR-866L DIR-652 DHP-1565 Current Description Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue...

Erlang-OTP-SSH-CVE-2025-32433

✅ Result The server responded to an SSH message ID 80 0x50 — which is reserved for post-auth. This proves the server accepts invalid messages during the pre-auth phase, indicating vulnerable behavior as defined in CVE-2025-32433. 📖 Research Summary I built this lab after studying Erlang/OTP and t...

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

CVE-2020-14882-weblogicRCE

كشف RCE في خادم "WebLogic Server" التابع لشركة Oracle CVE-2020-14882 / CVE-2020-14750 الملخص: كشف محاولات استغلال CVE-2020-14882 وCVE-2020-14750 - تنفيذ تعليمات برمجية عن بُعد RCE بدون مصادقة في خادم Weblogic Server من Oracle. المراجع: نشرات Oracle الأمنية: CVE-2020-14882...

CVE-2023-1671-POC

Dork fofa title="Sophos Web Appliance" || app="Sophos-Web-Appliance" && title!="Sophos Web Appliance：错误请求" ZoomEye title:"Sophos Web Appliance"-title:"Sophos Web Appliance: Forbidden"-title:"Sophos Web Appliance: Bad Request" Shodan title:"Sophos Web Appliance" Usage root@kitploit: python...