152411 matches found
EUVD-2026-79511
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...
CVE-2026-70756
CVE-2026-70756 is a critical vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to ...
CVE-2026-70748
Oracle WebLogic Server (Oracle Fusion Middleware, component: Core ) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected by a critically rated vulnerability (CVSS 3.1: 9.8 ). An unauthenticated attacker with network access via the T3 or IIOP protocols can exploit this flaw w...
EUVD-2026-79509
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...
CVE-2025-7384
CVE-2025-7384 — Inyección de Objetos PHP a RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Crítico CWE: CWE-502 — Deserialización de Datos No Confiables Requisito de autenticación: Ninguno No autenticado Impacto: Ejecución Remota de Código Tabla de Contenidos 1...
CVE-2023-38646
CVE-2023-38646 Metabase Pre-Auth RCE Metabase open source anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor, al nivel de privilegio del servidor. No se requiere autenticación para la explotación. Las otras versiones...
CVE-2023-38646-PoC
CVE-2023-38646 - Metabase 预授权 RCE Metabase 开源版本 0.46.6.1 之前以及 Metabase 企业版 1.46.6.1 之前的版本允许攻击者在服务器上以服务器的权限级别执行任意命令。利用该漏洞无需认证。其他已修复的版本包括 0.45.4.1、1.45.4.1、0.44.7.1、1.44.7.1、0.43.7.2 和 1.43.7.2。 PoC 步骤 1. 访问 http://vulnerablehost.com/api/session/properties 2. 找到 "setup-token" 3. 获取一个 collaborator...
pre2k
root@kitploit: /'\ /\ \ /\ /\ \ \ /'\ /\ '/'/'\ //// /\ \ , \ \ \L\ \ \ //\ //\ // /\ \ \ \\ \ \ ,/\ \\ \// // \ \ \ \ \ / // // // //// \ \ v3.0 // @unsignedsh0rt @Tw1sm Pre2k Pre2k 是一款用于查询 pre-windows 2000 计算机对象是否存在的工具,这些对象由 @Oddvarmoe 所发现,可被利用来在目标域中获取立足点。Pre2k...
Blackash-CVE-2025-54574
🛑 CVE-2025-54574 — Squid(≤ 6.3)中的堆缓冲区溢出 🛑 严重性: 严重(CVSS 9.3) 受影响软件: Squid 代理(6.3 及更早版本) 漏洞类型: 基于堆的缓冲区溢出 发现于: URN(统一资源名称)处理 影响: 可能实现远程代码执行 或拒绝服务 ,可通过网络利用,无需任何身份验证 🔍 这是什么问题? 该缺陷出现在 Squid 解析 URN 响应的过程中。内存处理不当会导致堆溢出,这意味着恶意的 HTTP 响应可能会破坏内存,从而可能让攻击者使 Squid 崩溃或运行任意代码。 ✅ 如何修复 升级到 Squid 6.4 或更高版本。该版本已修补此漏洞...
Solr-GRAB
Solr-GRAB Apache Solr インスタンスのクエリを、ユーザー名とパスワードの有無にかかわらず収集します。 免責事項 : このプロジェクトは、許可されたテストおよび教育目的にのみ使用すべきです。 ダウンロード root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 使用方法 Censys を使用して、dork "Welcome To Solr" または "Apache Solr Admin" で Apache Solr インスタンスを検索できます。クエリを取得するには、HTTP...
CVE-2023-4220
CVE-2023-4220 RCE Chamilo 1.11.24 | https://starlabs.sg/advisories/23/23-4220/ | | Chamilo LMS /tmp/rce.php EOF curl -F 'bigUploadFile=@/tmp/rce.php' "$HOST/$URLUPLD" CMD=$echo $CMD|base64 -w0| python3 -c "import urllib.parse,sys; printurllib.parse.quoteplussys.stdin.read" curl...
CVE-2023-25136
CVE-2023-25136 OpenSSH 9.1 漏洞批量扫描与利用 描述 OpenSSH server sshd 9.1 在处理 options.kexalgorithms 时引入了双重释放漏洞,该问题已在 OpenSSH 9.2 中修复。在默认配置下,未经身份验证的远程攻击者可利用该双重释放漏洞跳转到 sshd 地址空间中的任意位置。第三方报告称“远程代码执行在理论上是可能的”。 https://nvd.nist.gov/vuln/detail/CVE-2023-25136 使用 1. 运行 scan.py 脚本并输入包含 IP 地址的文件名 python scan.py 2. ...
EUVD-2026-79506
Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...
EUVD-2026-79507
Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...
CVE-2026-87287
CVE-2026-87287 affects the Compiler component of Oracle GraalVM 25.0.4.1 (part of Oracle Java SE). A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in full takeover of Oracle GraalVM. The CVSS 3.1 base score ...
CVE-2026-87288
Oracle GraalVM (component: Compiler ), part of Oracle Java SE, is affected in supported version 25.0.4.1 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve takeover of Oracle GraalVM, with high impact on confidentiality, integrity, and availability. The...
CVE-2025-24071
Informe de vulnerabilidad de seguridad: CVE-2025-24071 - Vulnerabilidad de suplantación en el Explorador de archivos de Windows Resumen NSFOCUS CERT ha detectado que Microsoft publicó recientemente una actualización de seguridad para abordar una vulnerabilidad crítica de suplantación en el...
CVE-2026-87286
Oracle GraalVM (component: Compiler ), version 25.0.4.1 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product. The vulnerability is rated CVSS 8.1 (HIGH) with high impact on confidentiality, integrity, and ava...
EUVD-2026-79505
Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...
text4shell-exploit
Text4shell-exploit 这是一个概念验证(PoC),用于利用 Apache Commons Text 中的漏洞 CVE-2022-42889 受影响版本:1.5.0 至(不含)1.10.0 影响 成功利用此漏洞,可使未经身份验证的攻击者在易受攻击的资产上执行任意代码 用于验证 PoC 的易受攻击应用程序 由 @securekomodo 开发的应用程序,附加在 此处。 Docker 该应用程序也可以从 docker-registry 加载 root@kitploit: docker run -p 8080:8080 gokul2/text4shell-poc:latest...