CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 blog post...

EUVD-2026-102022

In api-gateway versions till 1.7.3, The default rate-limit key resolver, ClientIpKeyResolver, derives the per-client bucket key from the leftmost element of the X-Forwarded-For request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy...

CVE-2026-110726

In api-gateway versions till 1.7.3, The default rate-limit key resolver, ClientIpKeyResolver, derives the per-client bucket key from the leftmost element of the X-Forwarded-For request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy...

CVE-2026-110726

The api-gateway software, in versions up to 1.7.3 , is vulnerable to a rate-limit bypass due to the ClientIpKeyResolver component. The root cause is that the resolver derives the per-client bucket key from the leftmost element of the X-Forwarded-For request header without validating it against a ...

CVE-2026-110726

In api-gateway versions till 1.7.3, The default rate-limit key resolver, ClientIpKeyResolver, derives the per-client bucket key from the leftmost element of the X-Forwarded-For request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

polkit-CVE-2021-3560_writeup

Try Hack Me - Polkit:CVE-2021-3560 Author: Atharva Bordavekar Difficulty: Info Points: 32 Vulnerability: CVE-2021-3560 we will first check the version of the polkit version to get some better insights. apt list --installed | grep policykit-1 policykit-1/focal,now 0.105-26ubuntu1 amd64...

CVE-2025-31161

CVE-2025-31161 - CrushFTP Authentication Bypass Exploit This Python script exploits CVE-2025-31161, an authentication bypass vulnerability in CrushFTP, allowing unauthenticated attackers to retrieve the user list from the getUserList API endpoint. Features Authentication bypass via CrushAuth and...

Bypass-CVE-2025-58360

During my geoserver analysis I found another way to attack unauthenticated XML External Entities XXE via WMS GetMap operation. We can call this vulnerability via /geoserver/workspaces/ows, by using OWS call to WMS service instead of calling WMS service directly via /geoserver/wms as shown below...

CVE-2025-51458-exp

CVE-2025-51458-exp Pre-Auth SQL Injection in DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'"...

CVE-2018-2893

CVE-2018-2893 Step 1 java -jar ysoserial-cve-2018-2893.jar WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-2893.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @mbechler JRMPClient3 @mbechler JRMPClient4...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

CVE-2024-35469

CVE-2024-35469 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/user/ in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affected...

USN-8883-2: Go vulnerability

USN-8883-1 fixed a vulnerability in Go versions 1.18, 1.21, and 1.24. This update provides the corresponding fix for Go version 1.23. Original advisory details: It was discovered that the Go x/net/idna package incorrectly handled certain Punycode-encoded labels that decoded to ASCII-only labels. ...

CVE-2025-55182-checker

CVE-2025-55182 Vulnerability Detector - Enhanced Edition A comprehensive vulnerability detection tool for CVE-2025-55182 in React/Next.js applications with multiple detection techniques. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING AND RESEARCH PURPOSES ONLY This tool is designed for:...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

wpx

█ █░ ██▓███ ▒██ ██▒ ██▀███ ▄▄▄ ▓██ ██▓ ▓█░ █ ░█░▓██░ ██▒ ▒▒ █ █ ▒░▓██ ▒ ██▒▒████▄ ▒██ ██▒ ▒█░ █ ░█ ▓██░ ██▓▒ ░░ █ ░▓██ ░▄█ ▒▒██ ▀█▄ ▒██ ██░ ░█░ █ ░█ ▒██▄█▓▒ ▒ ░ █ █ ▒ ▒██▀▀█▄ ░██▄▄▄▄██ ░ ▐██▓░ ░░██▒██▓ ▒██▒ ░ ░ ▒██▒ ▒██▒░██▓ ▒██▒ ▓█ ▓██▒ ░ ██▒▓░ ░ ▓░▒ ▒ ▒▓▒░ ░ ░ ▒▒ ░ ░▓ ░░ ▒▓ ░▒▓░ ▒▒ ▓▒█░ ██▒▒▒ ▒...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...