105104 matches found
POC-CVE-2018-25031
CVE-2018-25031 - Swagger UI before 4.1.3 A simple POC CVE-2018-25031 that tricks the victim into entering the authorization code, which is then sent to the attacker. You can use it with the XSS Vulnerability https://github.com/VictorNS69/swagger-ui-xss It is necessary to find the parameter and...
Burp_CVE-2025-31324
CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composerโs Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...
CVE-2024-43998
CVE-2024-43998 Description CVE-2024-43998 : Missing Authorization vulnerability in the Blogpoet theme allows access to functionality not properly constrained by ACLs. This issue affects Blogpoet versions from n/a through 1.0.3. Usage usage: CVE-2024-43998.py -h -u URL -p PLUGIN CVE-2024-43998...
CVE-2022-46169
Here is the transformed explanation document: CVEโ2022โ46169 โ Explanation & Project Overview Cacti Unauthenticated Remote Code Execution What is this project? This project is a cybersecurity assignment demonstrating CVEโ2022โ46169 : a critical vulnerability in the open-source network monitoring...
CVE-2025-25257
๐จ CVE-2025-25257 โ FortiWeb SQLi to RCE Critical SQL Injection โ Webshell Execution Discovered and weaponized by 0xgh057r3c0n ๐ง Vulnerability Overview CVE-2025-25257 affects FortiWeb systems exposing the endpoint /api/fabric/device/status, which fails to properly sanitize Authorization header...
NextJS-CVE-2025-29927-Docker-Lab
๐จ NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. โ ๏ธ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...
CVE-2026-8239
CVE-2026-8239 CVE-2026-8239 is an Insecure Direct Object Reference IDOR vulnerability affecting Concrete CMS 9.5.0 and earlier.The vulnerability exists in the /ccm/frontend/conversations/getrating endpoint, which allows an attacker to determine whether a conversation message exists and retrieve i...
CVE-2026-8237
CVE-2026-8237 CVE-2026-8237 is an Insecure Direct Object Reference IDOR vulnerability caused by missing authorization checks in Concrete CMS 9.5.0 and earlier.The flaw exists in the /ccm/frontend/conversations/messagedetail endpoint, which returns the full contents of conversation messages based...
CVE-2020-0728
CVE-2020-0728 ่ฉณ็ดฐ TrustedInstaller.exe ใตใผใในใฏ NTAUTHORITY\SYSTEM ใจใใฆๅฎ่กใใใSxs Store ใฏใฉใน 3C6859CE-230B-48A4-BE6C-932C0C202048 COM ใตใผใในใจใคใณใฟใผใใงใผใน ISxsStore ใใในใใใฆใใพใใ ใใฎใตใผใในใฎใขใฏใปใน่จฑๅฏ O:BAG:BAD:A;;CCDCLC;;;PSA;;CCDC;;;SYA;;CCDC;;;BAA;;CCDC;;;IUA;;CCDC;;;SU ใฏใใญใผใซใซใทในใใ ไธใฎไปปๆใฎใฆใผใถใผใซใขใฏใปในใ่จฑๅฏใใพใใ ISxsStore ใคใณใฟใผใใงใผ...
CVE-2026-63435
A flaw was found in Mail, an internet library for Ruby. The library's decoding of RFC 2047 encoded-words in email headers was vulnerable to an overly greedy charset capture. A remote attacker could exploit this by crafting a malformed encoded-word in an address display name or local part. This...
cve-2026-16219-croogo-lab
CVE-2026-16219: Croogo FileManager defensive lab This repository documents and safely demonstrates the path-authorization flaw tracked as CVE-2026-16219 in Croogo CMS. It is intended for defenders, maintainers, students, and researchers testing systems they own or are explicitly authorized to...
bola-CVE-2023-27524
bola-CVE-2023-27524 ๐ README.md โ BOLA CVE-2023-27524 Demo Project ๐ Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- ๐ Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and its secure...
CVE-2026-54761-poc
CVE-2026-54761: Traefik Kubernetes Gateway crossProviderNamespaces Bypass PoC ๆฅๆฌ่ช็ใฏใใกใ Description This repository contains a local Proof of Concept PoC for CVE-2026-54761 , a high severity vulnerability in Traefik's Kubernetes Gateway provider. The vulnerability affects the crossProviderNamespac...
CVE-2026-7459
CVE-2026-7459 CVE-2026-7459 Simple History Missing Authorization Account Takeover Exploit...
CVE-2026-105097
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...
QNAP HBS 3 - Broken Access Control
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...
Powertek Firmware <3.30.30 - Authorization Bypass
Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...
Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update
The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...
Hospital Management System 1.0 - SQL Injection
Hospital Management System 1.0 contains a SQL injection vulnerability via the editid parameter in /HMS/user-login.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion
The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...