145642 matches found
CVE-2025-32433-available-for-windows
CVE-2025-32433 Information about the vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server. options: -h, --help...
CVE-2019-11043
CVE-2019–11043: PHP-FPM Nginx Remote Code Execution Vulnerability Vulnerability Description and Impact CVE-2019–11043 is a remote code execution RCE vulnerability. It affects PHP-FPM, which is a FastCGI Process Manager that is commonly used with Nginx web servers. The flaw arises from inadequate...
CVE-2026-107295 `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.toweb and clai web development chat endpoint has missing request content-type validation. A website visited by a developer can submit a...
EUVD-2026-94642
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host...
cve-2024-21762-poc
cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...
Mass-Scanner-CVE-2026-2631
⚡ CVE-2026-2631 Async Mass Checker Private async mass-checker for internal WordPress validation 🚨 Warning This tool performs a destructive validation. It sends a POST request to the target endpoint and may changeshopsecret on vulnerable targets. Use it only on systems you own or are explicitly...
CVE-2021-45007
CVE-2021-45007 Cross-Site Request Forgery Affected product and version: Plesk Obsidian 18.0.37 Severity: High Impact: Submit requests with attacker information Description: CSRF could let the attacker to submit new requests because there isn’t any CSRFtoken protection sent with requests to server...
cve-2026-69243-poc-aiohttp-smuggling
CVE-2026-69243 — aiohttp Request Smuggling CWE-444 Request smuggling via rejected WebSocket upgrade in aiohttp Or build the Rust version zero dependencies, std only: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling cd cve-2026-69243-poc-aiohttp-smuggling/poc cargo build...
poc-yaws-dav-xxe
XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: curl -i -s -k -X LOCK http://localhost:8000/ -H 'Timeout:...
Atmail-exploit-toolchain
AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...
miniupnpd_poc
Miniupnpd path that is greater than 526 bytes. The root cause is due to the lack of validating the return value of snprintf since snprintf returns the value of how many bytes it could of copied, not how many bytes it did copy. As of Jan-25-2019 the PoC within this repro has been successfully test...
svg-cheatsheet
SVG SSRF Cheatsheet Hosts that process SVG can potentially be vulnerable to SSRF, LFI, XSS, RCE because of the rich feature set of SVG. All of these methods specify a URI, which can be absolute or relative. File and HTTP protocol are important to test, but it could also support other protocols...
cve-2025-43564-tomcat_put_rce_reproduction
CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...
CVE-2021-41773-apache
CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...
voron-crypto
Voron crypto/protocol library — request for review This is the crypto and messaging-protocol core of a small E2EE messenger project, pulled out on its own for outside review. It is not the whole product — the Android client and deployment config are intentionally left out; this is just the part...
CVE-2026-107286 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel or limitmodelconcurrency can retain shared concurrency slots because anyio.CapacityLimiter associates an acquired sl...
CVE-2025-55853
CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...
Spring4Shell-Python-Firewall-POC
Python Firewall for Spring4Shell CVE-2022-22965 Mitigation 1. Overview This project is a simple but effective firewall implemented as a Proof-of-Concept POC in Python. It's designed to act as an HTTP server that inspects incoming POST requests to detect and block the specific payload pattern...