CVE-2019-11539

CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2024-3400

CVE-2024-3400 PoC for educational purposes only. only use on servers you have permission to test. How-To-Use deps: $ pip install rich scan targets.txt： $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...

CVE-2023-22515-NSE

CVE-2023-22515-NSE This repository provides a tool to check for the presence of the CVE-2023-22515 vulnerability in Atlassian Confluence Server using the Nmap Scripting Engine NSE. Overview of CVE-2023-22515 CVE-2023-22515 is a critical vulnerability in Atlassian Confluence Server that allows...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission from the owner. 📋 Description Detection tool for CVE-2026-3055 that identifies Citrix NetScaler ADC and...

CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v3.0.7 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version 3.0.7. https://vulners.com/cve/CVE-2021-38699 POC: Admin dashboard start param: POST http://cvefarm.local/admin/dashboard HTTP/1.1...

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

CVE-2024-33297

CVE-2024-33297 Stored Cross Site Scripting vulnerability in Microweber = 2.0.9 Summary : A Stored Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name Internal Name field in the "Add new campaign" function. Requirements ...

CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

CVE-2022-23378

CVE-2022-23378 : Reflected XSS in TastyIgniter v3.2.2 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version v3.2.2. Mitre URL: https://vulners.com/cve/CVE-2022-23378 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Proof of Concept POC: Admin...

admin-panel-finder

admin-panel-finder A Python Script to find admin panel of a site...

Invoke-BSOD

Invoke-BSOD For when you want a computer to be done - without admin! BSOD method from here: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 A PowerShell script to induce a Blue Screen of Death BSOD without admin privileges. Also...

CVE-2026-20896

Proof of Concept Code CVE-2026-20896 This script automates the exploitation of the logic flaw in Gitea's API route validation, allowing to force the server to grant a valid administrative token through a Directory Traversal attack in the authorization header. !/usr/bin/env python3 PoC: Gitea...

CVE-2024-10924

Exploit for CVE-2024-10924 WordPress Really Simple Security Plugin - Authentication Bypass 📌 Overview CVE-2024-10924 is a critical authentication bypass vulnerability in the Really Simple Security plugin for WordPress versions 9.0.0 to 9.1.1.1. This vulnerability allows unauthenticated attackers ...

phpipam_1.4.4

CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the subnet parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php. This project currently prints out database information and host version...

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2021-22911-rust

CVE-2021-22911 A rust proof of concept for this CVE. Used as part of https://tryhackme.com/room/rocket, a CTF boot to root on the TryHackMe learning platform. To use, update the constants in main.rs and run, and it should work straight off. Requires that you have the admin email address and...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: Unauthenticated Admin Approval Bypass Proof-of-concept exploit for CVE-2026-6145 , a missing authorization vulnerability in the User Registration & Membership plugin for WordPress ≤ 5.1.5 that allows unauthenticated attackers to bypass...