CVE-2023-27372-PoC

Esto es una prueba de concepto de la vulnerabilidad RCE CVE-2023-27372 en SPIP. Es una falla de deserialización que explota el uso peligroso de la etiqueta ENV durante la función de restablecimiento de contraseña spip.php?page=spippass dentro de /ecrire/balise/formulaire.php. Específicamente esta...

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 Buffer Overflow References https://vulners.com/cve/CVE-2003-0264 Vulnerability SLMail has no bounds checking when submitting a POP3 password. As a result, you can execute arbitrary code by submitting a long, malformed POP3 PASS to the SLMail server...

CVE-2026-107573

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 on Windows suffer from incorrect default permissions in the installer. The installer creates data, log, temp, database, and event folders, along with the hMailServer.INI configuration file, using permissions inherited from the installatio...

CVE-2026-104659

Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote attacker to brute-force the server administrator's password through the administrator's own browser by DNS rebinding...

EUVD-2026-94834

Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote attacker to brute-force the server administrator's password through the administrator's own browser by DNS rebinding...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Este repositorio muestra un exploit para CVE-2021-24762. Es un exploit de Blind SQLi que, en la configuración predeterminada, obtiene la contraseña del administrador. Mientras realizaba un laboratorio, basado en WordPress con el plugin PerfectSurvey, me topé con una...

Exploit for CVE-2026-18963

CVE-2026-18963: Keycloak reset-credentials flow bypass Unauth...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — Bypass de Autenticación para Toma de Control de Cuenta de Administrador Resumen de la Vulnerabilidad El plugin de WordPress Burst Statistics versiones 3.4.0 a 3.4.1.1 es vulnerable a una vulnerabilidad de bypass de autenticación no autenticado qu...

CVE-2026-85488

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

CVE-2026-85488

Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...

CVE-2026-85488

Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance OVA...

CVE-2026-5769

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

CVE-2026-5769

A vulnerability exists in Brocade SANnav versions prior to 3.0.1 where the Brocade Fabric OS switch admin password may be captured in plaintext within a memory swap file. This occurs when the SANnav server experiences an Out Of Memory (OOM) condition. An authenticated admin user with access to th...

CVE-2026-5769

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

EUVD-2026-94755

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

CVE-2025-4606

CVE-2025-4606 Overview This tool is used to test the vulnerability CVE-2025-4606 in WordPress using the Sala – Startup & SaaS WordPress Theme. This vulnerability allows Privilege Escalation through Account Takeover because the theme does not properly validate user identity before updating sensiti...

CVE-2026-44596

CVE-2026-44596 — YAMCS Sin Límite de Tasa en el Endpoint de Autenticación Resumen El endpoint de autenticación POST /auth/token en yamcs-core carece de cualquier forma de limitación de tasa, bloqueo de cuenta o estrangulamiento de intentos fallidos. Un atacante remoto no autenticado puede realiza...

Grafana-Password-Decryptor

Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: 🔐 AES-256 Base64 datasource table → Decrypt directly with AESDecrypt.py 🔨 PBKDF2HMACSHA256 user...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Install required libraries with: pip install requests pip install bs4 $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTION CVE-2018-7600 | | by pimps |...

ZipRarHunter

ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...