Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting

Bulk Me Now! WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

PoC-for-ME-SAML-Vulnerability

PoC-for-ME-SAML-Vulnerability PoC for cve-2022-47966 To test, send it to /SamlResponseServlet as POST Request. Base64 encode it and give it as value to SAMLResponse Parameter and send. Format POST /SamlResponseServlet HTTP/1.0 Host: SAMLResponse=&RelayState=...

CVE-2021-21973-Automateme

CVE-2021-21973-Automateme automate me!...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - Unauthenticated SQL Injection Description The RSVP ME plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2024-43044-jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine. Check out the full...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

Tell-Me-Root

Tell Me Root Batch Detection Tool Based on cve-2026-24061 Telnet Remote Authentication Bypass Vulnerability This is a super super super lightweight tool written in Python! Hands-free, batch scanning, just sit back and wait for the shell to be fed to you! Even a paramecium can easily dig out...

CVE-2026-119337 RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completionopenai and returns through the openai-compatible branch before UserCanvasService.accessible checks whether the caller may access the requested agen...

CVE-2019-13272

CVE-2019-13272 - Pkexec Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author BCOLES Description In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the...

ODH-BricksBuilder-CVE-2024-25600-THM

ODH-BricksBuilder-CVE-2024-25600-THM Overview This repository hosts a Python-based vulnerability scanner developed by Oblivion Development & Hosting OD&H to detect CVE-2024-25600 in the Bricks Builder plugin for WordPress. This tool is designed primarily for use within Try Hack Me THM exercises,...

hide-me

Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...

CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...

CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...

EUVD-2026-112184

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...

CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...

CVE-2026-117619

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...

CVE-2026-117619

Jenkins versions 2.587 and earlier (including LTS 2.580.1 and earlier ) are vulnerable to an insufficient session expiration flaw (CVE-2026-117619 ). The root cause is that requests authenticated via HTTP Basic authentication , including those using API tokens , can result in the acquisition of a...

PT-2026-128307

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.587 Jenkins LTS versions prior to 2.580.1 Description Requests authenticated via HTTP Basic authentication, including those using an API token, can be used to obtain a remember-me cookie. This allows an attacker who...

Insufficient session expiration vulnerability

Jenkins's "Keep me signed in" feature uses a persistent cookie, known as the "remember me" cookie, to re-authenticate users without requiring them to enter credentials again. The validity of this cookie does not depend on the credentials used to obtain it. Jenkins 2.587 and earlier, LTS 2.580.1 a...