4896 matches found
Exploits
Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...
Zena-CVE-2021-45026
Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...
CVE-2026-55579
CVE-2026-55579 â Pheditor Hardcoded Default Password RCE -critical TL;DR: Pheditor all versions ships with a hardcoded default administrator password admin embedded in its source code. There is no forced password change on first login, only a visual warning. Any unauthenticated attacker can log i...
HIKRAVEN
HIKRAVEN đĄď¸ Advanced Hikvision Security Assessment Platform - Professional Edition Features ⢠Quick Start ⢠Installation ⢠Usage ⢠Documentation ⢠Disclaimer â ď¸ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...
CVE-2023-26258-ArcServe
The TL; DR; If you are in the network you can scan for instances configured by default using ArcServeRadar.py. I tried to port it to C but couldn't, feel free to do it if you know how : c:\Users\vagrant\Desktoppython ArcServeRadar.py "Ethernet 2" 6969 192.168.56.20 -= ArcServe Finder - @TheXC3LL ...
wp-def
wp-def Wordpress Default User + Pass Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py...
CVE-2025-57428
â ď¸ This repository is maintained only as a reference for CVE-2025-57428. For other advisories and updates, please refer to: security-advisories. CVE-2025-57428 - Telnet debug interface enabled by default allows low-level flash/register access Affected Product Vendor/Brand: Each Italy Device:...
JFrog Artifactory 6.7.3 - Admin Login Bypass
JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...
CVE-2026-20169
IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...
gerapy-cve-2021-43857
Gerapy CVE-2021-43857 Authenticated RCE This repository contains a proof of concept exploit for CVE-2021-43857 , a Remote Code Execution vulnerability affecting Gerapy -p -L -P Requirements 1. Python 3.x 2. requests and pyfiglet pip install requests pyfiglet 3. Netcat nc...
Wordpress-Default-Password
Wordpress Default U/P python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614 Encrypt By Azim !...
Tool_Exploit_Password_Camera_CVE-2018-9995
ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...
CVE-2023-30765
CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilege Escalation Bug credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Usage python3...
CVE-2023-37073
CVE-2023-37073 Telnet default credentials can lead to information disclosure and denial-of-service DoS attacks. Steps To reporduce This affect the AP AR-5310 Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Information disclosure through Telnet default credentials When y...
PT-2026-118297
Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login in github.com/sipcapture/homer-app. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
CVE-2026-112296
FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain...
EUVD-2026-104277
FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain...
CVE-2026-112296
The FlyCms content management system (through commit edfdf724 ) is vulnerable to a default credentials vulnerability. This flaw allows unauthenticated remote attackers to gain super administrator access by logging into the flycms account using the default password admin123 via a POST request to /...
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials
FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain...
CVE-2026-112296 FlyCms through commit edfdf724 Default Super Administrator Credentials
FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain...