Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution OVERVIEW Apache RocketMQ is one of the most popular and widely used distributed messaging and streaming platforms. A command execution vulnerability has been recently reported in Apache RocketMQ affecting version 5.1.0 and below. A remote...

PT-2026-104158

Dell System Update flaw CVE-2026-86360 CVSS 9.6 could let attackers run code as root. Dell fixes five bugs in DSU 2.3.0.0. Patch now. Dell DellSystemUpdate DSU CVE202686360 CVE202686361 CVE202686362 PathTraversal https://t.co/jtc9b82YND...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Iniciar un servidor de actualizaciones malicioso front Vincular un servidor http/https pero reenviar todo sin modificar infect Manipulación de alto nivel, inyectar comandos adicionales en un...

security_articles

securityarticles- Vulnerabilities in Connected V16 Beacons Article where I explain several vulnerabilities found in the Help Flash IoT V16 beacon. These vulnerabilities affect the beacon's communications and a WiFi software update mechanism. DEC-2025...

connectwise-automate-AiTM-rce

ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...

CVE-2024-39700-PoC

CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability3 is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example ...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...

Intel-Linux-Processor-Microcode-Data-Files

Paquete de Microcódigo para Procesadores Intel para Linux Acerca de El Paquete de Actualización de Microcódigo MCU para Procesadores Intel proporciona un mecanismo para publicar actualizaciones para avisos de seguridad y problemas funcionales, incluyendo erratas. Además, los MCU son responsables ...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

CVE-2022-3368

CVE-2022-3368 PoC for arbitrary file move vulnerability in Software Update component of Avira Security. Users have option to use this feature to update any outdated software on their PC ,when this feature is used Avira Security service will drop downloaded files in...

pwninit

pwninit A tool for automating starting binary exploit challenges Features Set challenge binary to be executable Download a linker ld-linux.so. that can segfaultlessly load the provided libc Download debug symbols and unstrip the libc Patch the binary with patchelf to use the correct RPATH and...

vuln-list-update

vuln-list-update Recopila información de vulnerabilidades y la guarda automáticamente en un formato analizable Datos https://github.com/aquasecurity/vuln-list/ Uso $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debia...

routers-exploit

Repo OpenSource con PoCs y vulnerabilidades encontradas en routers TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS CVE-2020-9374 - TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS Payload: "$ls" TP LINK TL-WR849N - Bypass de autenticación: actualización de firmware y configuracione...

Arlo

Arlo Extrae binarios ejecutables de volcados y actualizaciones de Arlo Ver publicación en https://www.synacktiv.com/publications/arlo-im-watching-you Analizador arlo.py se utiliza para analizar un volcado de memoria flash, descargar y analizar actualizaciones o listar modelos conocidos. Requiere...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/ ◈ Vulnerability Field| Detail ---|--- CVE ID| CVE-2025-13342 Score| 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Affected| Frontend Admin by DynamiApps ≤ 3.28.20 Auth| None —...

EUVD-2026-91017

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied URL with filegetcontents after only format validation FILTERVALIDATEURL — there is no validation of the request destination...

CVE-2026-56661

The GetSimple CMS CE community edition, prior to version 1.5 , is vulnerable to a Server-Side Request Forgery (SSRF) in its update handler. The application uses file_get_contents() to fetch a user-supplied URL, performing only basic format validation via FILTER_VALIDATE_URL without verifying the ...