CVE-2019-3396

CVE-2019-3396 CVE-2019-3396 confluence SSTI RCE 🔎 CVE-2019-3396 とは？ Atlassian の重大な Confluence バグ です。 タイプ: テンプレートインジェクション + パストラバーサル リスク: ログインなしのリモートコード実行 RCE ステータス: 実環境で悪用済み 🛑 影響を受けるバージョン 6.6.0 → 6.6.11 ❌ 脆弱 6.6.12 ✅ 修正済み 6.12.0 → 6.12.2 ❌ 脆弱 6.12.3 ✅ 修正済み 6.13.0 → 6.13.2 ❌ 脆弱 6.13.3 ✅ 修正済み 6.14....

CVE-2024-8353

This post is a research article published by EQSTLab. Thanks tocuokon, who discovered this vulnerability. Introduction Further Analysis CVE-2024-5932 EQST Insight R&TPDF file. https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 Arbitrary...

Vulnerability-Assessment-Exploitation-Lab

Vulnerability-Assessment-Exploitation-Lab Metasploitable 2 Penetration Testing Lab Executive Summary This project documents a successful, full-lifecycle penetration test against the Metasploitable 2 Linux environment. The assessment follows the Penetration Testing Execution Standard PTES , coveri...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

CVE-2026-72898

CVE-2026-72898 Metabase 密码重置未认证 SQL 注入 ★ CVE-2026-72898 Metabase /api/session/resetpassword 未认证盲 SQL 注入 PoC ★ https://github.com/user-attachments/assets/4efe5ae3-2a41-4567-815b-ee3f731a5a59 概述 CVE-2026-72898 是 Metabase 中的一个未认证 SQL 注入 漏洞（CVSS 10.0），可通过公开的 POST /api/session/resetpassword 端点访问。...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 found by Red Timmy Security Technical Analysis: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf Security advisory: unknow Proof Of Concept: 1. Removing the config files T...

chamilo-lms-unauthenticated-rce-poc

Chamilo LMS Unauthenticated RCE PoC This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and install the dependenci...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

CVE-2025-3102

CVE-2025-3102 🛠️ SureTriggers Exploit Script This script is used to identify and exploit security vulnerabilities in the SureTriggers plugin on WordPress sites using a vulnerable version ≤ v1.0.78. If successful, the script will automatically create a WordPress admin account. ⚙️ Features Detection...

CVE-2024-3922-Poc

CVE-2024-3922-Poc Dokan Pro Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://192.168.110.184:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/126.0.0.0 Safari/537.36 Accept:...

CVE-2019-18935

CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...

CVE-2024-7954-RCE

Description The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. Exploit Proof of concept...

CVE-2026-81478

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2018-13379

🛡️ CVE-2018-13379 - Fortinet SSL VPN 脆弱性 🔍 概要 CVE-2018-13379 は Fortinet FortiOS SSL VPN における 重大なパストラバーサル 脆弱性です。 攻撃者が VPN ウェブセッションファイルをダウンロード し、機密情報を抽出することを可能にします。 影響: 情報漏洩（ユーザー名、セッショントークン） CVSSv3: 8.6（高） 悪用条件: リモート、認証不要 💻 影響を受けるバージョン FortiOS 5.4.6 – 5.4.12 FortiOS 5.6.3 – 5.6.7 FortiOS 6.0.0 –...

CVE-2025-53770-Checker

CVE-2025-53770-Checker Checks if an on-premises SharePoint server is vulnerable to CVE-2025-53770 Non-intrusive detector of the CVE-2025-53770 vulnerability in SharePoint Server Development: Division81 ethical hacking team of Grupo Oruss Technical Description CVE-2025-53770 is a critical .NET...

CVE-2019-0708

CVE-2019-0708 Mass Detection 0x01 Preface CVE-2019-0708 Windows RDP Remote Code Execution Vulnerability On May 15, 2019, a high-risk vulnerability was disclosed for Windows series servers. This vulnerability affects a wide range of systems, including Windows 2003, Windows 2008, Windows 2008 R2,...

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - 認証なし任意ファイルアップロード CVE-2026-3891 PoC 📜 説明 CVE-2026-3891 は、WordPress プラグイン Pix for WooCommerce における認証なし任意ファイルアップロードの脆弱性です。このプラグインは、認証なしで証明書ファイルのアップロードを受け付ける AJAX エンドポイント lknpixforwoocommercec6savesettings を公開しています。nonce は、別の公開エンドポイント lknpixforwoocommercegeneratenonce...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2026-81481

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Path Traversal vulnerability (improper limitation of a pathname to a restricted directory). An unauthenticated attacker with remote access could exploit this to gain filesystem access , with a HIGH confidentiality impact bu...