arduino-pico

Arduino-Pico Raspberry Pi Pico Arduino core, for all RP2040 and RP2350 boards This is a port of Arduino to the RP2040 Raspberry Pi Pico processor and RP2350 Raspberry Pi Pico 2 processor. It uses the bare Raspberry Pi Pico SDK and a custom GCC 16.1/Newlib 4.6 toolchain and supports ARM and RISC-V...

Instatic-Stored-XSS-CVE-2026-103931

URL scheme filter bypass in isSafeUrl via leading C0 control characters Affected: Instatic v0.0.13 / commit 63ad5d6 and all earlier revisions containing src/core/html-sanitize/index.ts Component: src/core/html-sanitize/index.ts → isSafeUrl / safeUrl Class: CWE-79 Stored XSS via CWE-184 Incomplete...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

wordpress-upgrade-check

wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...

CVE-2021-44228

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902: WordPress Core Unauthenticated Path Traversal & RCE Mitigation 🔴 Watch the Full Breakdown & Mitigation Tutorial: 👉 Click Here to Watch on YouTube 📖 Overview This repository provides emergency reference notes, web server mitigation rules, and hardening configs covered in our...

ROOT-APP-MAVEN-CVE-2026-41845 CVE-2026-41845 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41845 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-41249 CVE-2025-41249 in org.springframework:spring-core - Patched by Root

Root has patched CVE-2025-41249 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...

CVE-2026-60137-WordPress-Core-SQL-Injection-PoC

CVE-2026-60137 — WordPress Core SQL Injection PoC Non-destructive proof-of-concept and verification harness for CVE-2026-60137 , a blind SQL injection in WordPress core WPQuery::authornotin, reachable via the REST API's authorexclude parameter. Root Cause WPQuery::getposts builds SQL by...

CVE-2018-8045

CVE-2018-8045 Joomla core SQL injection vulnerability principle and poc...

CVE-2024-43044

CVE-2024-43044 Description This script checks Jenkins instances for CVE-2024-43044 by retrieving the Jenkins version from the instance and comparing it against known vulnerable version ranges. CVE-2024-43044 : This vulnerability affects Jenkins core and remoting versions, allowing attackers to...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

CVE-2026-93485

⚡ CVE-2026-93485 - Comment2Shell 🧬 Overview CVE-2026-93485 is a high-severity cross-site scripting vulnerability affecting the WordPress core. The vulnerability is described as improper neutralization of user-controlled input during web-page generation, resulting in DOM-based XSS / stored XSS...

ARES

Operator-Directed Red Team Orchestration & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive...

CVE-2026-60137-and-CVE-2026-63030

wp2shell Lab — CVE-2026-60137 & CVE-2026-63030 WordPress Core Pre-Auth RCE lab — real exploitation, server RCE. WARNING: Lab chạy WordPress VULNERABLE. Không expose ra internet. Structure . ├── docker-compose.yml Lab: WordPress 6.9.4 + MariaDB 11 + phpMyAdmin ├── exploit/ PoC exploit cloned from...

drupal-jsonapi-sqli-scanner

CVE-2026-9082 — Drupal PostgreSQL SQL Injection Mass Scanner & Exploitation Tool Unauthenticated SQL Injection in Drupal Core PostgreSQL JSON:API filter array key injection via PDO placeholder name abuse Overview CVE-2026-9082 is a Highly Critical SQL injection vulnerability in Drupal Core...

Apache-Log4j2-RCE

Apache Log4j2 RCE Verification Environment Since from 2021.12.09 Some References https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Setting up the Environment Maven introduces related packages and vulnerable version range org.apache.logging.log4j log4j-api 2.14.1 org.apache.logging.log4j log4j-core...

sentric-core

SENTRIC Autonomous AI agent with its own cryptographic identity. It hunts CVEs, builds isolated exploit labs, validates vulnerabilities with working PoCs, and funds itself by trading crypto — 24/7, with no human in the loop. Built by one person on a home PC. Portugal, 2026. The problem it solves...