CVE-2024-34102

This repository does not have a README...

writeups

This repository does not have a README...

OdTM

OWASP Ontology-driven threat modelling OdTM framework Ontology-driven Threat Modelling OdTM framework is a set of means for implementation of an ontological approach into automatic threat modelling of computer systems. It is an OWASP Incubator Project. The ontological approach, provided by the Od...

CVE-2026-21509

This repository does not have a README...

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS A stored Cross Site Scripting XSS vulnerability exists within TastyIgniter v3.0.7 Restaurant CMS. The description input field, located in /admin/locations/settings is not properly sanitized, and allows...

RLSA-2026:99130 Important: mutter security update

Mutter is a compositing window manager that displays and manages desktop through OpenGL. It combines the window-management logic inherited from the Metacity window manager with a display engine that uses the Clutter toolkit. Security Fixes: mutter: mutter: client-triggered use-after-free in Wayla...

mutter security update

An update is available for mutter. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mutter is a compositing window manager that displays and manages desktop...

HENlo

This repository does not have a README...

CVE-2021-3156

This repository does not have a README...

CVE-2018-10933

This repository does not have a README...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

CVE-2024-25503

CVE-2024-25503 Vulnerability type : Cross Site Scripting XSS Product: Advanced REST Client desktop application Vulnerable Version: 17.0.9 Vendor of the products:https://www.advancedrestclient.com/ 1. Description Cross-Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a...

exploits

This repository does not have a README...

CVE-2023-0386

CVE-2023-0386 WIP...

CVE-2023-28588

This repository does not have a README...

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

CVE-2025-46041

Anchor CMS v0.12.7 - Stored XSS CVE-2025-46041 Anchor CMS v0.12.7 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the description field of the /admin/pages/add interface. CVE ID CVE-2025-46041 Summary Type: Stored XSS Location: Page creation interface /admin/pages/add Impact:...

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

CVE-2021-42664

CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vulnerability in the Engineers online portal system. Technical description: A stored XSS vulnerability exists in the Engineers online portal system. An attacker can leverage this vulnerability in order to run javascript on the web server...