CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repositorio: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Descripción Este repositorio contiene un exploit en Python para CVE-2019-16278 , una vulnerabilidad en Nostromo 1.9.6 un servidor web. La vulnerabilidad permite la Ejecución Remota de Código...

CVE-2026-14990

The IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 are vulnerable to a Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an unauthenticated user to embed arbitrary JavaScript code into the Web UI, which can alter intended functionality and potentially lead to the disc...

EUVD-2026-94986

IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

HTTP-Basma

Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...

CVE-2024-46377

CVE-2024-46377 PoC para la Vulnerabilidad de Carga de Archivos Arbitraria en Best House Rental Management System 1.0 Descripción general Este script de Python demuestra cómo explotar la vulnerabilidad de carga de archivos arbitraria en Best House Rental Management System 1.0. La vulnerabilidad...

CVE-2026-66479

Cross-Site Request Forgery CSRF vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6...

CVE-2026-105893

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-106600

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...

CVE-2026-105888

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2023-36845

CVE-2023-36845 ¿Uso? bash cve.sh yourfile.txt Referencias: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2024-8232

CVE-2024-8232 – Vulnerabilidad de subida de archivos en SpiderControl SCADA Web Server Resumen El servidor web SpiderControl SCADA es vulnerable a la subida arbitraria de archivos sin autenticación, lo que permite a los atacantes subir scripts maliciosos por ejemplo, webshells y obtener ejecución...

CVE-2025-55182-NSE

Nmap scripting engine .nse for CVE-2025-55182 https://nvd.nist.gov/vuln/detail/CVE-2025-55182 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣤⠴⠶⠶⠒⠒⠒⠒⠒⠶⠶⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣤⠶⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢶⣄⠀⣠⠴⠚⠛⠳⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠛⠉⠛⣶⠞⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠦⣄⠀⠀⠀⠀⠀⠀⠈⠻⡅⠀⠀⠀⠀⠈⢷⡀⠀⠀⠀⠀⠀⠀⠀⠀...

spring-framework-rce

spring-framework-rce CVE-2022-22965 Requirements 1. tomcat8 8 Usage 1. Download springframeworkrce-0.0.1-SNAPSHOT.zip, unzip, and rename to ROOT.war. 2. Replace the ROOT folder or ROOT.war in the webapps folder of tomcat. 3. Switch to the bin directory of tomcat and run .\catalina.bat run. Testin...

cve-2022-22947-godzilla-memshell

CVE-2022-22947 godzilla-memshell CVE-2022-22947: Inyectar Godzilla Memory Shell...

CVE-2025-45619

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...

Open-Worldwide-Application-Security-Project-OWASP-

Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105078 WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3...

CVE-2019-12453

CVE-2019-12453 CVE-2019-12453 XSS almacenado en MicroStrategy Web anterior al parche 10 de la versión 10.1 Autor: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 En MicroStrategy Web anterior a la versión 10.1, parche 10, es posible un XSS almacenado en el parámetro FLTB debido a la...