CVE-2025-69581

CVE-2025-69581 An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the...

b4tm4n

B4TM4N PHP WEBSHELL Login Account Default Username : k4mpr3t Password : k4mpr3t Features 0 File Manager 1 Sec. Info 2 Simply Database 3 Interactive terminal 4 PHP Reverse Back Connect 5 Run PHP Code 6 Custom Toolz 7 Self Script Encryptor ! 8 Error Handler 9 Themes Self Script Encryptor Usage :...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

Zphisher-GUI-Back_office

Mi website: https://microjoan.com My YouTube Channel: https://www.youtube.com/c/MicroJoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing thi...

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

CVE-2023-30256

Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloApps 1.5.2: Vulnerable to XSS on two Parameter emailcreate and back Exploit - Proof of Concept POC XXS: 'back' Parameter Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL Encoded:...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An example of a Mantis...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

cve2023-44372

cve2023-44372 Under Work Please come Back Later...

CVE-2022-46638

CVE-2022-46638 Its about vulnerability of AppLock Ver.5.6.2, a popular android app trusted by more than 100 million users in over 150 countries. PoC Unlock the application protected by AppLock just by tap the back button multiple times. 1. Open the application was locked by AppLock. 2. Dont input...

CVE-2026-114701

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

CVE-2026-114701

The xootix Waitlist Woocommerce ( Back in stock notifier ) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 2.9.1 due to the improper neutralization of input during web page generation. While the documents confirm the existence ...

CVE-2026-114701 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

EUVD-2026-108082

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xootix Waitlist Woocommerce Back in stock notifier waitlist-woocommerce allows Stored XSS.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.9.1...

WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Waitlist Woocommerce Back in stock notifier versions = 2.9.1...

CVE-2026-113265

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Back/Forward Cache BFCache, a browser feature that accelerates page navigation. A remote attacker could exploit this flaw by convincing a user to open a crafted HTML page, potentially allowing arbitrary code...

CVE-2026-112786

OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's revert action with an importID to mass-delete imported...