Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 is vulnerable to cross-site scripting via the segments/add.php Segment Name field. id: CVE-2018-1000856 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to cross-site scripting via the...

WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting

The WordPress Download Manager plugin before version 3.2.44 does not properly sanitize and escape the userids parameter in the stats history dashboard. This allows authenticated attackers to perform Cross-Site Scripting attacks by injecting malicious JavaScript code. id: CVE-2022-2168 info: name:...

Enigma NMS < 65.0.0 - Authenticated OS Command Injection

An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...

n8n - Remote Code Execution via Expression Injection

n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...

MagnusBilling Alarm Module - Cross-Site Scripting

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling Alarm Module modules allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling-...

CVE-2024-57521-SQL-Injection-PoC

Authenticated SQL Injection in RuoYi v4.7.9 Bypass of CVE-2024-42900 Introduction I discovered a Blind SQL Injection vulnerability in the createTable feature of RuoYi Framework v4.7.9. This allows an authenticated administrator to execute arbitrary SQL commands via the sql parameter. This is a...

cve-2024-37765

Description MachForm up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page. SQL injection attacks consist in inserting SQL queries through the usage of an input data field from the client application. This kind of attack allows to obtain access to...

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import...

CVE-2026-61837

A flaw was found in RabbitMQ. The Advanced Message Queuing Protocol AMQP 1.0 management interface fails to perform proper authorization checks when processing requests for message bindings. An authenticated user without administrative privileges can exploit this issue to enumerate the complete...

Roundcube-CVE-2025-49113

Roundcube RCE Exploit CVE-2025-49113 A fully functional proof-of-concept exploit for CVE-2025-49113 🧠 Summary CVE-2025-49113 is an The vulnerability is the result of a logic flaw in the application's session parser, which allows insecure deserialization of PHP objects. Authenticated users can...

CVE-2020-8816

CVE 2020-8816 : Pi-hole versions = 4.3.2 is affected by a Remote Code Execution vulnerability. An authenticated user of the Web portal can execute arbitrary command with the underlying server with the privileges of the local user executing the service. EXAMPLE : go run CVE-2020-8816.go -host $LHO...

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel Domain Parking RCE Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act U...

CVE-2012-2982

This PoC exploit for CVE-2012-2982 was written as an exercise for the "Intro to PoC scripting" Room on TryHackMe. The room can be found here: https://tryhackme.com/room/intropocscripting I was originally going to use Python to follow along, but decided to practice my Rust skills instead. I also s...

CVE-2026-67416

A flaw was found in rabbitmq-server, where the Advanced Message Queuing Protocol AMQP parser fails to validate the length of message body descriptors. An authenticated remote attacker with write permissions can exploit this vulnerability by publishing a crafted message with an unrecognized...

CVE-2026-37070

CVE-2026-37070 Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a specially crafted GET request to the affected endpoint...

CVE-2021-21014

PoC Limited CVE-2021-21014 Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Affected version: = Magento 2.4.1 User...

CVE-2020-14295

CVE-2020-14295 CVE-2020-14295 proof of concept. The original post can be found at exploit-db. Install requirements python3 -m pip install -r requirements.txt Usage $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL Injection / Remote Code...

EUVD-2026-103170

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted methods without required write,...

CVE-2026-108374

The ERPNext enterprise resource planning tool is vulnerable to unauthorised status modification in versions prior to 15.121.0 and 16.34.0 . The root cause is a missing authorization check in certain endpoints used for status modification. A low-privileged authenticated user can bypass required wr...