GitLab-CVE-2021-22205-

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Affected Version Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection. Proof Of Concept This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions ...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

CVE-2020-15051

CVE-2020-15051 : Artica Proxy before 4.28.030418 Community Edition allows Stored Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

MassExploit-CVE-2024-4577

CVE-2024-4577 Mass Scanner & Exploit Tool This Python script automates the detection of servers vulnerable to CVE-2024-4577 , a critical vulnerability in PHP-CGI that allows remote code execution RCE through specially crafted query parameters. The tool sends a PHP payload using...

CVE-2023-4357-Exploitation

CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

EUVD-2026-94804

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2023-32571

🐞 CVE-2023-32571 - System.Linq.Dynamic.Core Remote Code Execution Proof of Concept for CVE-2023-32571, a remote code execution vulnerability in System.Linq.Dynamic.Core 1.0.7.10 to 1.2.25. This vulnerability allows attackers to execute arbitrary code and commands when untrusted input to methods...

cve-lfi-lab

🧠 مختبر CVE: محاكاة محلل SOC من المستوى الأول CVE-2025-39507 | تضمين الملفات المحلي في إضافة Nasa Core لـ WordPress 📝 السيناريو: يوم في مركز العمليات الأمنية SOC إنه يوم اثنين عادي. أنا مسجّل الدخول إلى لوحة تحكم SOC، أراجع التنبيهات كالمعتاد. يصل أحدها ويلفت انتباهي: تنبيه: محاولة محتملة لتضمين...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

EUVD-2023-60708

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2026-87687

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary fabri...

CVE-2026-87688

An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution i...

CVE-2026-87674

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

POC_CVE-2024-10829

POCCVE-2024-36420 Local reproduction lab and nuclei template draft for CVE-2024-36420 affecting Flowise. Summary CVE-2024-36420 is an arbitrary file read in Flowise caused by unsanitized use of the fileName body parameter in: POST /api/v1/openai-assistants-file This lab was used to validate:...

EUVD-2026-94689

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

CVE-2026-87674

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...

CVE-2026-87674

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication IPC channels allow an unprivileged local user to submit malformed logging...