CVE-2024-0012

Vérificateur de vulnérabilité Palo Alto PAN-OS CVE-2024-0012 Ce script Python vérifie la présence d'une vulnérabilité critique de contournement d'authentification dans l'interface Web de gestion Palo Alto Networks PAN-OS, identifiée comme CVE-2024-0012. La vulnérabilité permet à un attaquant non...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse est une application .NET écrite en C qui peut être utilisée pour exploiter les droits de modification d'un utilisateur sur un objet de stratégie de groupe GPO afin de compromettre les objets contrôlés par ce GPO. Plus de détails sont disponibles dans l'article de blog...

CVE-2024-28000

CVE-2024-28000 PoC В этом репозитории содержатся инструменты для эксплуатации уязвимости CVE-2024-28000, затрагивающей сайты на WordPress, использующие плагин LiteSpeed Cache. Включённые скрипты автоматизируют обнаружение открытых файлов debug.log и эксплуатацию уязвимости повышения привилегий,...

open-sammy

SAMMY Open Source v2 Этот репозиторий содержит версию SAMMY с открытым исходным кодом — инструмент OWASP SAMM. https://owasp.org/www-project-open-sammy/ Лицензия Этот проект лицензирован в соответствии с международной лицензией Creative Commons Attribution-ShareAlike 4.0. Подробности см. в файле...

CVE-2024-42327

Preuve de concept et exploit pour CVE-2024-42327 / ZBX-25623 Un compte utilisateur non administrateur sur le frontend Zabbix avec le rôle Utilisateur par défaut, ou avec tout autre rôle donnant accès à l'API, peut exploiter cette vulnérabilité. Une injection SQL existe dans la classe CUser, dans ...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML 인증 우회 익스플로잇 프레임워크-툴킷 Oracle WebLogic Server — SAML 인증 우회 → 관리자 권한 탈취 익스플로잇 프레임워크 및 대량 스캐너 승인된 보안 테스트 전용입니다. ⚖️ 법적 고지 및 책임 있는 사용 이 도구는 교육 및 승인된 침투 테스트 목적으로만 제공됩니다. 저자와 기여자는 이 소프트웨어의 오용 또는 피해에 대해 책임을 지지 않습니다. 사용자는 테스트 전에 대상 소유자로부터 명시적인 서면 허가를 받았는지 전적으로 책임집니다...

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127, эксплуатируемая с 2023 года для получения административного доступа. Этот репозиторий содержит рабочий proof-of-concept эксплойт для CVE-2026-20127 — критической уязвимости предварительной аутентификации в Cisco...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Présentation Cet outil est un script d’exploit proof-of-concept PoC pour CVE-2025-59718, une vulnérabilité critique de contournement d’authentification dans les produits Fortinet par ex. FortiOS, FortiProxy, FortiSwitchManager due à une vérification incorrecte des...

CVE-2024-44000

FR GenCookieSessionHijack est un outil PoC conçu pour exploiter les journaux de débogage exposés de manière non sécurisée sur des sites WordPress et extraire les cookies de session. Cela permet à l’attaquant de détourner des sessions administrateur actives et d’obtenir un accès non autorisé au...

CVE-2025-63820

CVE-2025-63820 Отправитель: Nicola Giuffrida Информация Производитель: TOTOLINK Веб-сайт производителя: TOTOLINK Модель: A720R Версия прошивки: V4.1.5cu.630B20250509 Адрес загрузки прошивки: TOTOLINK Детали уязвимости При входе в панель управления имя пользователя и пароль отправляются в открытом...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Уязвимость межсайтового скриптинга Cross Site Scripting в Wonder CMS v.3.2.0–v.3.4.2 позволяет удалённому злоумышленнику выполнить произвольный код с помощью специально созданного скрипта, загружаемого в компонент installModule. Только в образовательных целях Требуется...

Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation

An Improper Access Control vulnerability was discovered in the plugin. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource. id: CVE-2021-24215...

Four-Faith F3x36 - Authentication Bypass

Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests. id: CVE-2024-9643 info: name: Four-Faith F3x36 -...

FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass

FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions. id: CVE-2025-69971 info: name: FUXA = 1.2.7 - Hardcoded J...

WP Content Permission <= 1.2 - Cross-Site Scripting

The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ohmem-message' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WP Directory Kit <= 1.4.4 - Authentication Bypass

The WP Directory Kit plugin for WordPress version 1.4.4 and below contains an authentication bypass vulnerability in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain administrative access by exploiting a cryptographically weak token generation mechanism tha...

WSO2 - Server Side Request Forgery

WSO2 products contain SSRF and reflected XSS vulnerabilities in the deprecated Try-It feature accessible only to administrative users, caused by improper URL validation and direct content reflection, letting attackers trick admins into executing arbitrary JavaScript and querying internal services...

ARMember < 3.4.8 - Unauthenticated Admin Account Takeover

The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover even the administrator due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username. id:...

Profile Builder < 3.4.9 - Improper Authentication

The Profile Builder plugin before 3.4.9 for WordPress allows unauthenticated attackers to gain administrative access by exploiting an improper authentication vulnerability in the password reset functionality. An attacker can reset the password of any user, including administrators, without proper...

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...