EUVD-2026-97638

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projections. Attackers can project restricted fields from the unreduced $after or $before parameters under an alias to receive...

CVE-2026-109336

SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass where record users can access fields hidden by field-level SELECT permissions . The root cause is a flaw in LIVE SELECT projections , allowing attackers to project restricted fields from unreduced $after or $before parame...

CVE-2016-10033

CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 and is able to get Remote Code Execution. Resources https://vulners.com/cve/CVE-2016-10033 Usage As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with: cd CVE-2016-10033 go...

CVE-2018-0114

CVE-2018-0114 before 0.11.0 unathenticated remote attacker can re-sign using a key embeded in token. https://www.cvedetails.com/cve/CVE-2018-0114/...

CVE-2026-21123

Improper privilege management in Locksettings prior to the SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile before the first unlock. This vulnerability affects Samsung Mobile devices and results in high confidentiality impact. Remedia...

OpenCode < 1.0.216 - Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying serve...

CVE-2018-10933-POC

CVE-2018-10933-POC libSSH bypass A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 It is simple POC Here in code replace the and accordingly...

CVE-2023-38831-winrar

CVE-2023-38831-winrar Quick exploit builder for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. I created this exploit builder mainly to learn python language, so don't expect to find clean and optimized code...

CVE-2026-62034

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62034 WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62034

The Before After Image Comparison – Image comparison for WP WordPress plugin, version

EUVD-2026-96469

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

cve-2026-75157-poc

CVE-2026-75157 PoC Authorized security research PoC for the Apache Airflow queued-events authorization flaw in versions before 3.3.2. Scope Run only against an Airflow instance you own or are explicitly authorized to test. The default runner refuses non-loopback targets. This repository contains ...

cve-2021-4034

cve-2021-4034...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox Product before V-9.2.1 is Vulnerable to CSV macro injection. Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 2.2.10 - SQL Injection Found by Daniele Scanu. Can be found Here Fixes the problem: "File "/home/user/CVE-2019-9053", line 25 print "+ Specify an url target" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print...?...

linux_CVE-2020-24490-beforePatch

This repository does not have a README...

CVE-2022-33171

CVE-2022-33171: TypeORM SQL Injection Note: This is a work-in-progress analysis of CVE-2022-33171. The details provided here may be updated as further information becomes available.currently not working Vulnerability Details CVE ID: CVE-2022-33171 Product: TypeORM Affected Versions: 0.3.0...

PT-2026-109801

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62028

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...