EUVD-2025-211096

A time-of-check time-of-use toctou race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.6.4.001 and lat...

CVE-2023-7028-Docker

CVE-2023-7028 with Docker 🎯 Want to practice with the new gitlab CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Go to the project : cd CVE-2023-7028-Dock...

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

EUVD-2026-101864

The Email Customizer for WooCommerce Pro plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the sendtestmail function, which allows user-controlled PHP code to be written to...

CVE-2026-81534

The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution (RCE) in versions up to and including 3.9.5 . The root cause is insufficient authorization and input sanitization within the send_test_mail() function, which allows for the injection of user-con...

MOVEit_CVE-2023-34362_IOCs

MOVEit CVE-2023-34362 IOCs More information on Deep Instinct's blog site. Disclaimer The code provided is offered as-is and is intended for educational or informational purposes only. The user assumes all responsibility for the use of this code and any consequences that may arise from its use. Th...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

CVE-2026-43284-DIRTY-FRAG-

CVE-2026-43284-DIRTY-FRAG- Detailed technical analysis of CVE-2026-43284 Dirty Frag local privilege escalation flaw in the Linux kernel. CVE-2026-43284 commonly referred to as part of the Dirty Frag vulnerability suite is a critical local privilege escalation LPE flaw in the Linux kernel. It stem...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

BillQuick Web Suite SQL Injection

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xpcmdshell. id: CVE-2021-42258 info: name: BillQuick Web Suite SQL Injection...

Ivanti EPMM < 12.8.0.0 - Remote Code Execution

Ivanti Endpoint Manager Mobile contains a code injection vulnerability allowing unauthenticated attackers to execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-1340 info: name: Ivanti EPMM 12.8.0.0 - Remote Code Execution author: 0xAkoko severity: critical...

kube-reaper

kube-reaper Kubernetes RBAC attack path mapper. It finds what your identity can do, flags dangerous permissions, and chains them into multi-step paths to cluster compromise. Built for red teamers and penetration testers. What It Does kube-reaper scans a Kubernetes cluster from any identity user,...

PT-2026-115218

Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support versions prior to 26.2.3 Description Internal components of the software fail to adequately validate the origin of received messages, leading to an unauthenticated file upload flaw. This allows an attacker to perform...

PT-2026-114799

The Email Customizer for WooCommerce Pro plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send test mail function, which allows user-controlled PHP code to be written to...

citrix-netscaler-cve-2026-88771-iocs

Citrix NetScaler CVE-2026-88771: Indicators of Compromise Indicators of Compromise IoCs observed by watchTowr Intel during in-the-wild exploitation of CVE-2026-88771, an unauthenticated command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway. Indicators in this repository we...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...

CVE-2026-55573

e107 is a content management system CMS. Prior to 2.3.7, install.php decodes the attacker-controlled previoussteps POST parameter and passes it to unserialize at file scope and again in the einstall constructor without restricting allowed classes. The installer remains accessible after a normal...

Malicious code in @xxxfnbs21/hello-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca1e29da88b95415d443f6911d2facdbabec1a0cd7b756594ffdf4336e1442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @xxxfnbs21/hello-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17876 Malicious code in @xxxfnbs21/hello-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ca1e29da88b95415d443f6911d2facdbabec1a0cd7b756594ffdf4336e1442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...