75233 matches found
westone-CVE-2021-45232-scanner
westone-CVE-2021-45232-scanner Apache APISIX Dashboard earlier versions 2.10.1 has security vulnerability on unauthorized access. the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on...
Exploit for Interpretation Conflict in Wordpress
LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...
vt-go
vt-go Esta es la biblioteca cliente oficial de Go para VirusTotal. Con esta biblioteca puedes interactuar con la API REST v3 de VirusTotal sin tener que enviar solicitudes HTTP simples con el paquete estándar "http". Ejemplo de uso package main import "flag" "fmt" "log" "os" vt...
vt-py
vt-py This is the official Python client library for VirusTotal. With this library you can interact with the VirusTotal REST API v3 and automate your workflow quickly and efficiently. Things you can do with vt-py Scan files and URLs Get information about files, URLs, domains, etc Perform VirusTot...
MLflow-Vuln
Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow-Vulnerability MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced ...
CVE-2023-6289
CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export Description The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the on functionality hooked via admininit functi...
CVE-2020-16846-Saltstack-Salt-API
CVE-2020-16846-Saltstack-Salt-API Vulnerability Explained: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. The details about this vulnerability can be found here:...
cve-2017-5487
What is CVE-2017-5487? : A vulnerability in the REST API implementation in wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in WordPress versions prior to 4.7.1 that does not restrict the list of authors, allowing remote attackers to obtain sensitive information via a...
CVE-2025-9074-Poc
Docker API Unauthenticated RCE CVE-2025-9074 A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet 192.168.65.7:2375. The issue persists regardless of Enhanced Container Isolation ECI or TCP...
BurpSuiteSharpener
About this repository & EOL This repository will not be updated anymore. Please use https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener This extension should add a number of UI and functional features to Burp Suite to make working with it a bit easier. The latest version only work...
CVE-2025-3248
CVE-2025-3248 Exploit Tool Documentation Introduction This tool is used to exploit the CVE-2025-3248 vulnerability a Python-based code injection vulnerability to achieve remote command execution RCE on the target server by crafting malicious payloads. The vulnerability exists in a web application...
CVE-2025-32682
🐚 CVE-2025-32682 - Arbitrary File Upload in MapSVG Lite = 8.5.34 📌 Plugin Details Name: MapSVG Lite Affected Version: = 8.5.34 Vulnerability Type: Arbitrary File Upload CVE ID: CVE-2025-32682 Published Date: 15 April, 2025 CVSS Score: 9.9 Critical 💥 Vulnerability Summary The MapSVG Lite plugin fo...
CVE-2024-11972-POC
Description Name : CVE-2024-11972 CVSSv3 Score : 9.8 Affected Versions : Hunk Companion argparse, requests, urljoin Usage options: -h, --help show this help message and exit -u URL, --url URL Base URL of the WordPress site default: http://localhost/wordpress/. -p PLUGIN, --plugin PLUGIN Plugin na...
CVE-2023-40028
CVE-2023-40028 Exploit This script exploits a vulnerability in Ghost CMS, allowing arbitrary file read through symbolic link abuse. Features Creates a symlink to the target file Compresses the payload into a ZIP file Uploads the ZIP file via the Ghost API Reads the file through an accessible imag...
CVE-2024-48061
CVE-2024-48061 Langflow vulnerable to remote code execution CVE-2024-48061 poc Usage python3 poc.py -i -p -l -lp Description This script exploits a vulnerable API endpoint at /api/v1/validate/code on the target web server. It first verifies the presence of the vulnerable path, then starts a TCP...
gitlab-cve-2026-85706-ioc
CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit GitLab CE/EE Repository Commits API Unauthenticated Path Traversal CVSS 3.1: 10.0, Critical Status: Actively exploited in the wild · Listed in CISA KEV 2026-09-11, due 2026-09-14 · Patched by GitLab 2026-09-10 A free,...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: buildkitd, dagger, kaniko, k8sgpt, zot, spegel, syft, docker-compose, wolfictl, helm-mapkubeapis, cluster-api-helm-controller, rancher, trivy, docker-cli-buildx, manifest-tool, rancher-helm, zarf, headlamp, newrelic-infrastructure-agent, kube-arangodb, rancher-agent,...
CVE-2024-22198_Checker
CVE-2024-22198 - authenticated remote code execution in Nginx-ui Description This tool made for remote checking your Nginx-ui version and notify if it's vulnerable to CVE-2024-22198. Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by...