CVE-2025-6934

CVE-2025-6934 自动利用工具 ⚡ 概述 CVE-2025-6934 是一个概念验证（PoC）漏洞利用程序，针对 WordPress 插件：Opal Estate Pro ≤ 1.7.5 。 该利用程序演示了无需身份验证即可创建管理员账户 。 免责声明： 此 PoC 仅供教育目的使用。未经许可，请勿 在系统上使用。 🛠 功能特性 自动检测插件版本。 获取注册所需的 nonce。 无需身份验证即可创建新的管理员账户。 带有状态、成功、失败和信息消息的彩色控制台输出。 适用于 Python 3.x，且依赖极少。 ⚙️ 安装 1. 克隆仓库： root@kitploit: git...

Project-CVE-2026-75604

Next.js Windows 缓存遍历安全研究 仅限防御性安全研究和授权验证。 本仓库涉及 CVE-2026-75604 ，这是一个严重漏洞，可能允许未经身份验证的攻击者在某些托管于 Windows 的 Next.js 部署上执行远程代码。 致谢 编写者： Xer0TLabs x Persephrak 去中心化联盟 研究目的： 漏洞意识、授权安全测试和防御性修复 上述署名转载自原始脚本头部，未经独立核实。 法律与道德使用 本项目仅可用于以下目标： 您个人拥有的系统 明确为本地安全测试创建的环境 您事先获得明确书面授权的目标 不得...

CVE-2026-88012

Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints do not apply entryPoints..transport.respondingTimeouts.readTimeout because the timeout is enforced on a TCP connection and the HTTP/3 server has no corresponding QUIC stream...

CVE-2026-81467

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-81048

Dell ThinOS 10, versions prior to 260510.2616, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...

CVE-2025-32433-available-for-windows

CVE-2025-32433 漏洞信息: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server. options: -h, --help show this help...

CVE-2026-85664

A flaw was found in Chroma. Unauthenticated attackers can exploit this vulnerability by providing excessively large parameters during collection creation. This can lead to the exhaustion of server memory, resulting in a denial of service during index compaction...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow 路径遍历 任意文件写入导致 RCE 通过文件上传实现未认证远程代码执行 -orange?style=for-the-badge 📌 概述 Langflow 在文件上传端点（POST /api/v2/files）存在严重的路径遍历 漏洞。 攻击者可发送包含 ../ 序列的恶意文件名，在服务器文件系统的任意位置写入任意文件 。 这很容易导致完全远程代码执行（RCE） —— 例如通过放置 WebShell 或注入 crontab。 🛠️ 功能特性 ✅ 未认证利用（默认自动登录配置） ✅ 简单概念验证（向 /tmp 写入测试文件） ✅ 通过...

EUVD-2026-75585

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...

CVE-2026-88018

rclone (a command-line tool for syncing files to cloud storage) contains a SigV4 signature bypass in its serve s3 mode. When configured with --auth-proxy but without --auth-key, the authPairMiddleware registers any client-chosen accessKeyID with an empty secret. The embedded gofakes3 component th...

CVE-2026-88018 rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...

CVE-2026-88018 rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...

CVE-2026-88018

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...

CVE-2026-1357

CVE-2026-1357 -- WPvivid RCE WPvivid Backup & Migration における未認証リモートコード実行（RCE） 800%2C000-brightgreen?style=for-the-badge" alt="Installs" 800,000〜900,000以上の WordPress サイトに影響する重大な脆弱性 未認証での任意 PHP アップロード → サーバー完全侵害 🌩️ 概要 CVE-2026-1357 （CVSS 9.8 – Critical）は、Migration, Backup, Staging – WPvivid Backup &...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - 認証不要の任意ファイルアップロード WordPress用プラグインPodlove Podcast Publisherは、バージョン4.2.6以前のすべてのバージョンにおいて、moveasoriginalfile関数でファイルタイプの検証が欠如しているため、任意のファイルアップロードが可能な脆弱性があります。これにより、認証されていない攻撃者が影響を受けるサイトのサーバーに任意のファイルをアップロードでき、リモートコード実行が可能になる可能性があります。 CVE CVE-2025-1014...

EUVD-2026-75573

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...

CVE-2026-81046

Dell ThinOS 10 versions prior to 2605_10.2616 are affected by a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote network access can potentially exploit this flaw to achieve Arbitrary Code Execution within the application context. The CNA-assigned CVSS 3.1 score ...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...