35535 matches found
1C-Bitrix Before and After Photos Code Execution
Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
m4ngl3m3
m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...
CP Image Store with Slideshow <= 1.0.67 - SQL Injection
The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the orderingby query parameter before using it in a SQL statement in pages where the codepeople-image-store is embed, allowing unauthenticated users to perform an SQL injection attack. id: CVE-2022-1692...
OpenCode < 1.0.216 - Unauthenticated Remote Code Execution
OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying serve...
Cobbler 'XML-RPC' - Authentication Bypass
Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...
Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection
The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...
CVE-2016-10033
CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 and is able to get Remote Code Execution. Resources https://vulners.com/cve/CVE-2016-10033 Usage As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with: cd CVE-2016-10033 go...
CVE-2025-71450 inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450
The inih library, in versions prior to r63 , is vulnerable to a one-byte stack buffer under-read within the ini_parse_stream() function in ini.c. The root cause occurs during the discard loop when processing an overlong line; an attacker providing an INI file or string with a line of at least INI...
linux_CVE-2020-24490-beforePatch
This repository does not have a README...
CVE-2023-22974
CVE-2023-22974 OpenEMR 7.0.0 Arbitrary File Read...
CVE-2021-23383
CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source...
CVE-2023-38831
CVE-2023-38831 PoC Proof Of Concept This is an easy to use exploit for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. An exploitable vulnerability has been identified in RARLabs WinRAR versions prior to 6.23. This vulnerability enables attackers to execute arbitrary cod...
CVE-2018-10933-POC
CVE-2018-10933-POC libSSH bypass A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 It is simple POC Here in code replace the and accordingly...
CVE-2019-20372
Poc for CVE 2019-20372 [email protected] Description NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...
CVE-2024-53376
CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...
CVE-2022-31007-Python-POC
Python automation of the following write up on an elabFTW account lockout bypass and login brute force that affects versions before 4.1.0. Both scripts can be used against Proving Grounds Practice lab named Source, which is running a vulnerable version of elabFTW - a free and open source electron...
cve-2024-44308
cve-2024-44308 Michael Goppert, Michael Jennings, and John Jennings Safety This issue in WebKit was patched long before this proof-of-concept was released. As such, it did not pose any danger to real users: the whole purpose is to document these kinds of exploits so that we know how to protect...
CVE-2019-9053
CVE-2019-9053 CMS Made Simple 2.2.10 - SQL Injection Found by Daniele Scanu. Can be found Here Fixes the problem: "File "/home/user/CVE-2019-9053", line 25 print "+ Specify an url target" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print...?...