copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

CVE-2024-33298

CVE-2024-33298 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...

CVE-2025-5947_Exploit

🔍 WordPress Plugin Exploit — Service Finder sf-booking Overview The Service Finder plugin is a booking and service management system for WordPress. Because of its popularity and complexity, some versions have had security issues related to unauthenticated AJAX endpoints or improper access control...

CVE-2024-33299

CVE-2024-33299 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner Improper Access Control in Gurock TestRail versions Input server in http:\ or https:\ format The script will print out the server/file location, status code if not 500, and any interesting keywords found...

CVE-2026-24061-GUI

CVE-2026-24061 Vulnerability Detection and Exploitation Tool Thank you🙏 for your Star support; Thank you🙏 for your usage and recognition; Program Overview This is a GUI tool for detecting and exploiting the CVE-2026-24061 vulnerability. This vulnerability is a GNU Inetutils telnetd authentication...

Blackash-CVE-2025-61884

CVE-2025-61884 New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login 💀 CVE-2025-61884 — Complete summary 🧾💥 Field| Details ---|--- Identifier| CVE-2025-61884 Product| Oracle E-Business Suite — Oracle Configurator Runtime UI Affected versions| 12.2.3 → 12.2.14 Attack vector|...

CVE-2024-56433

CVE-2024-56433 shadow-utils - Insecure default subordinate ID assignment for local users Summary The default subordinate ID assignment creates risk for collision with existing user ID's, creating potential for arbitrarily changing UID/GID and gaining unauthorized access to data and network...

CVE-2021-4034

Run the following commands on a vulnerable Linux machine in the directory where the c file is present and it should give you root access. $ gcc CVE-2021-4034.c -o exploit $ ./exploit whoami root...

CVE-2026-0920

Exploit Research: CVE-2026-0920 - LA-Studio Element Kit Backdoor Technical analysis and Proof of Concept PoC for the critical backdoor discovered in LA-Studio Element Kit for Elementor versions ≤ 1.5.6.3. This vulnerability allows unauthenticated administrative account creation. Vulnerability...

CVE-2023-41474

IVANTI AVALANCHE - PATH TRAVERSAL A new vulnerability has been found on Ivanti Avalanche. Tested on Avalanche Server v6.3.4.153 and identified as CVE-2023-41474. It’s a limited unauthenticated path traversal vulnerability, meaning that unauthorized attackers can access to any file under C:\PROGRA...

CVE-2026-24061-NSE

CVE-2026-24061 — GNU InetUtils telnetd Authentication Bypass Nmap NSE Detection Script Overview This Nmap NSE script detects CVE-2026-24061 , an authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. By sending a crafted USER environment variable of the form -f...

CVE-2024-3400-poc

CVE-2024-3400 Vulnerability PoC Proof of Concept Vulnerability Description CVE-2024-3400 is a command injection vulnerability in Palo Alto firewall systems. By crafting a malicious HTTP request, an attacker can execute arbitrary commands on the target server and even gain root privileges...

CVE-2026-24061_Lab

CVE-2026-24061 Telnetd Lab This repository contains a simple Docker lab to demonstrate the CVE-2026-24061 vulnerability. It allows authentication bypass and root access on GNU telnetd, on Linux. The purpose is exclusively educational. Requirements Docker installed Telnet Client installed Building...

CVE-2026-2600-POC

CVE-2026-2600 ElementsKit Elementor Addons $item echo '' . $item'ekittabtitle' . ''; Elementor's editor sanitizes input on the client side, but the REST API endpoint /wp-json/wp/v2/posts/id accepts the elementordata meta field directly and bypasses that layer entirely. An authenticated Contributo...

CVE-2026-1375

CVE-2026-1375: Authenticated IDOR / Broken Access Control in Tutor LMS Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit systems...

CVE-2026-33917_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-33917 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...

CVE-2014-4688-pfsense

CVE-2014-4688 – pfSense Command Injection Modified Exploit-DB proof-of-concept for CVE-2014-4688 pfSense statusrrdgraphimg.php command injection Overview This repository contains a modified version of the original Exploit-DB proof-of-concept for CVE-2014-4688 , affecting pfSense versions ≤ 2.1.3...

EUVD-2026-102203

bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookieinitfile in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled numpages field as the loop bound for byte-swapping pagesizes entries. A crafted file can make the loop re...

EUVD-2026-102198

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...