CVE-2021-38603

CVE-2021-38603 A stored cross site scripting vulnerability is present on the Profile edit page in the Information: field for each user. http:///core/admin/profil.php Vulnerable Fields: Information: Once inserted, XSS can be triggered by visiting any page/article created by that particular user...

PT-2026-90835

CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can enumerate all tasks in the system and delete arbitrary analyses by sending requests to task view and delete...

PT-2026-90860

A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...

PT-2026-90791

The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitrary role and escala...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Inyección de logs Un usuario autenticado puede realizar inyección de logs en el query.log de Neo4j cuando Neo4j no está configurado para usar formato json. Resumen Neo4j no escapa los caracteres de control en el campo de metadatos cuando forma parte de una transacción bolt...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

SSH_Enum_CVE-2018-15473

SSH Username Enumeration Exploit This script is a modified version of an original exploit that allows enumeration of SSH users on vulnerable servers OpenSSH 2.3 7.7. Functionality The script uses a vulnerability in the SSH protocol to enumerate valid users on the target server. It can enumerate...

pwndoc

PwnDoc PwnDoc es una aplicación de informes de pruebas de penetración que hace simple y fácil escribir tus hallazgos y generar un informe Docx personalizable. El objetivo principal es tener más tiempo para Pwn y menos tiempo para Doc al mutualizar datos como vulnerabilidades entre usuarios...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

CVE-2024-48644

CVE-2024-48644 Septiembre, 2024 Detalles del CVE CVE: https://vulners.com/cve/CVE-2024-48644 NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-48644 Tenable: https://www.tenable.com/cve/CVE-2024-48644 Enumeración de cuentas y cuentas de usuario adivinables Resumen La vulnerabilidad de enumeración de...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 is vulnerable to Cross-Site Request Forgery. Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC The application does not have any CSRF protection, hence a specially crafted HTTP request can be used to, Add New User Delete Existin...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

wavecrack

Wavecrack Descripción Una interfaz web amigable para compartir una máquina de cracking de hashcat entre múltiples usuarios con algunas opciones predefinidas. Capturas de pantalla La página de inicio Añadiendo un hash para craquear Viendo los resultados y algunas estadísticas Esquema Esta aplicaci...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

CVE-2025-27591-PoC

CVE-2025-27591 PoC: Escalada de Privilegios Local en Below v0.9.0 Prueba de Concepto para CVE-2025-27591, una vulnerabilidad que permite a usuarios locales sin privilegios escalar sus privilegios a root mediante ataques de enlace simbólico. 🕵️‍♂️ Detalles Técnicos La vulnerabilidad afecta al...

CVE-2024-0204

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script to create a new admin user in GoAnywhere MFT. Blog Post More details here: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Usage Password must be at least 8 characters long to meet GoAnywhere...

CVE-2021-3493

CVE-2021-3493 — Escalada de Privilegios Local de OverlayFS en Ubuntu Una prueba de concepto funcional para CVE-2021-3493 , una vulnerabilidad de escalada de privilegios local en la implementación de OverlayFS del kernel de Ubuntu. Un usuario sin privilegios puede montar un sistema de archivos...

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing root@kitploit: git clone https://github.com/commonexploits/weape.git How...