CVE-2026-27886-check

CVE-2026-27886 Vulnerability Assessment Tool Safely detect whether a Strapi instance is vulnerable to CVE-2026-27886 without performing the full account-takeover chain. See the full write-up on the Bishop Fox blog. Description CVE-2026-27886 is an unauthenticated parameter sanitization bypass in...

rea

English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Türkçe · Русский · Tiếng Việt · ไทย · Deutsch · Español · Français · Українська · Polski · Português Brasil · العربية · فارسی · Bahasa Indonesia · Italiano REA: Reverse Engineer Anything One MCP for reverse engineering across binaries, applications, and runtime...

CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

sharepoint-2026-poc

SharePoint /trust WS-Federation Deserialization: PoC & Detection Notes Live writeup GitHub Pages: https://sp-poc.wismansec.com/ HTML rendering of this document. Affected: SharePoint Server 2016, 2019, and Subscription Edition. Reconstruction of a SharePoint Server Subscription Edition intrusion i...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 SISQUALWFM Host Header Injection Vulnerability This repository contains information related to a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which allows an attacker to manipulate webpage links or redirect users to a malicious site. This...

react-server-cve-lab

React Server Components Security Lab CVE-2025-55183 & CVE-2025-55184 A comprehensive security testing environment for CVE-2025-55183 Source Code Exposure and CVE-2025-55184 Denial of Service vulnerabilities in React Server Components. ⚠️ Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES...

CVE-2025-57819_FreePBX

🛡️ CVE-2025-57819 – FreePBX Unauthenticated SQL Injection to RCE PoC This repository contains two Python Proof-of-Concept PoC scripts targeting CVE-2025-57819 , a critical unauthenticated SQL injection vulnerability in FreePBX. 🧠 About the Vulnerability CVE-2025-57819 CVE-2025-57819 affects...

shellshocker-pocs

Shellshocker - Repository of "Shellshock" Proof of Concept Code Collection of Proof of Concepts and Potential Targets for ShellShocker Wikipedia Link: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Please submit a pull request if you have more links ...

EnumJavaLibs

EnumJavaLibs EnumJavaLibs: Remote Java classpath enumeration via deserialization. Overview EnumJavaLibs can be used to discover which libraries are loaded i.e. available on the classpath by a remote Java application when it supports deserialization. ----------------- Serially - v1.1 by Stefan...

CVE-2025-56771

Description During analysis of the ecodotempo.com.br website, a Stored Cross-Site Scripting XSS vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are subsequently rendered to other users without proper sanitization, specifically on th...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2025-24893-PoC

CVE-2025-24893 – XWiki Remote Command Execution Proof of Concept Overview This repository contains a controlled Proof of Concept PoC for CVE-2025-24893 , an unauthenticated Remote Command Execution RCE vulnerability affecting XWiki. The vulnerability allows an attacker to execute arbitrary...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-6279.py

Description This Python script is an exploit tool for CVE-2026-6279 targeting Avada Builder = 3.15.2. Key behavior: scans targets for fusionloadnonce via Avada-specific shortcode/page patterns discovers AJAX endpoint and origin IP bypass if Cloudflare blocks admin-ajax builds exploit requests for...

CVE-2025-24893

CVE-2025-24893 XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. Due to a vulnerability in the SolrSearch endpoint, an unauthenticated user can achieve arbitrary remote code execution. This vulnerability affects the confidentiality,...

CVE-2026-30252

ZenShare Suite - Vulnerability Disclosure This repository contains details regarding multiple Reflected Cross-Site Scripting XSS vulnerabilities discovered in the ZenShare Suite application. Vulnerability Overview The ZenShare Suite application is vulnerable to Reflected Cross-Site Scripting XSS...

suhosin

Suhosin Suhosin pronounced 'su-ho-shin' is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core...

EUVD-2026-97266

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...