CVE-2026-109397

Thelia versions before 3.1.2 and 3.2.x before 3.2.1 are vulnerable to an unrestricted file upload flaw. The FileProcessorService validates raw filenames, but FileManager::sanitizeFileName() subsequently strips trailing spaces, allowing authenticated back-office users to bypass security checks and...

SSH-KILLv2

What about SSH-KILLv2 Script Attack iPhone if ssh service open, many users use "Open SSH" in jailbroken devices to transfer files between laptop / PC & iPhone to make their life easier but the issue here "Open SSH " tweak use the default password "alpine" and many users don't change it if they...

Zimbra-CVE-2022-30333

Zimbra-CVE-2022-30333 Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC. CVE-2022-30333 Zimbra UNRAR vulnerability. Unrar till V 6.11 vulnerable. Make sure your .jsp shell is undetected. This exploit will work on zimbra installed on default path. Place...

CVE-2025-2502

Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...

CVE-2022-44268

CVE-2022-44268 This repository contains a Proof of Concept POC for a vulnerability in ImageMagick v. 7.1.0-49, a widely used open-source image manipulation library. The vulnerability allows an attacker to embed the content of an arbitrary file into a resized image when ImageMagick parses a PNG...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

poc-cve-2024-0132

poc-cve-2024-0132 Reproduce Env: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduce Step: run the poc container image Target: Access host files in the container Call docker daemon apis via the docker.sock in the container Reproduce use the prebuilt poc...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB This repository contains a Crystallographic Information File CIF intended for use on the "Chemistry" machine on Hack The Box HTB. CIF File Example dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha 90.00000 cellanglebeta...

CVE-2024-3400

CVE-2024-3400 Simple Python code to check for arbitrary uploading to a PaloAlto Simply checks for status codes returned from the paloalto before and after file creation. This creates a randomly generated filename and attempts to call it back after post. This will save a file to your PaloAlto if...

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

CVE-2024-9162

CVE-2024-9162 All-in-One WP Migration and Backup SELECT optionname,optionvalue FROM wpoptions WHERE optionname='ai1wmsecretkey'; +------------------+--------------+ | optionname | optionvalue | +------------------+--------------+ | ai1wmsecretkey | PwrqqK3UHQJo | +------------------+-------------...

CVE-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...

CVE-2021-45010

CVE-2021-45010 🐍 Contrived Python PoC Exploit for CVE-2021-45010. Tiny File Manager 2.4.7 Usage usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME Username -p...

PhaseDump

PhaseDump Python tool for decrypting W32/Phase modules, first 16-bytes is the MD5 hash of decrypted code, rest is PE file RC4 encrypted with "Phase" as the key...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Arbitrary Local File Read https://www.metabaseq.com/imagemagick-zero-days/ Based on the PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, I created a vulnerability testing environment by using docker. Usage get image docker pull y1nglamore/cve202244268:latest you...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit A fully automated exploit script for CVE-2025-69212 , a command injection vulnerability in OpenSTAManager. This script authenticates with admin credentials, deploys a malicious PHP web shell via a crafted P7M file in a ZIP archive, and...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 -ARBITRARY FILE DOWNLOAD Collecting databases in mass with plugin : COMJOOMANAGER, From CMS: Joomla, Project developed in python 2.x, more information, access the youtube video. CVE: 2017-18345 Risk : Security Risk High 0day.Today-ID: 29950 ExploitDB-id: 44252 0day db-id: 16348...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...