CVE-2026-103438

The The Wikimedia Foundation MediaWiki Wikistories extension is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of Script-Related HTML tags in a web page. This vulnerability specifically affects versions 1.46, 1.45, and 1.43 . The issue is addressed through updates to ...

CVE-2026-103443

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

wp-CVE-2017-5487-exploit

Exploit de WordPress CVE-2017-5487 en Python Ejemplos de uso: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2018-1049-POC

Este script de Python es una reimplementación personalizada del exploit del módulo de Metasploit para CVE-2018-1049, que se dirige a VyOS Vyatta mediante una vulnerabilidad de escalada de privilegios en un script de Perl mal utilizado a través de sudo. Necesitas credenciales SSH válidas. Obtienes...

CVE-2025-66177

⚠️ Disclaimer / Descargo de Responsabilidad En español: Este código y el material relacionado se proporcionan únicamente con fines educativos, de investigación de seguridad y para pruebas de penetración legítimas y autorizadas. El uso de este script contra objetivos sin el consentimiento previo y...

EUVD-2026-90082

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master...

EUVD-2026-90079

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit He creado este pequeño script del CVE-2025-24367 - De Cacti, un script hecho para obtener una webshell gracias a la vulnerabilidad de cacti en su versión 1.2.28. Uso del script: python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario"...

GHSA-GFHX-HW2G-V5HG Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

Impact serialize-javascript escapes its output so it is safe to embed inside a element. In 7.1.1 that guarantee does not hold for function values: a crafted function body can carry a literal, unescaped into the output, terminating the script element early so the remainder is parsed as HTML...

NPM: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

NPM: Serialize JavaScript: Cross-site scripting XSS via unescaped in serialized function bodies vulnerability discovered by ? in WordPress Npm serialize-javascript versions = 7.1.1, 7.1.2...

CVE-2015-1635_PoC

uso: python3 CVE-2015-1635PoC.py p. ej. python3 CVE-2015-1635PoC.py http://www.xxx.com...

CVE-2026-100256

The vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2026.2.3 rCE . It is triggered via Structural Search script constraints within untrusted projects . The impact is categorized as HIGH (CVSS 7.8), potentially affecting confidentiality, integrity, and availability. No specific e...

EUVD-2026-90000

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects...

CVE-2026-100256

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects...

EUVD-2026-89996

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...

CVE-2026-103229 AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 Esta publicación trata sobre CVE-2022–24992, mi primer CVE, que se refiere a una vulnerabilidad en el script generador de códigos QR ampliamente utilizado de QRCDR. más información Saludos, n0lsec...

SUSE CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

CVE-2024-6387-nmap

Script Nmap de verificación de vulnerabilidades de OpenSSH Descripción El script openssh-vuln-checker.nse comprueba si un servidor está ejecutando una versión vulnerable de OpenSSHCVE-2024-6387. Se conecta al puerto SSH, obtiene el banner SSH y lo compara contra una lista de versiones vulnerables...