4466 matches found
CVE-2025-69347 WordPress WPSubscription plugin <= 1.8.10 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through = 1.8.10...
PT-2026-27807
Name of the Vulnerable Software and Affected Versions WPSubscription versions through 1.8.10 Description An authorization bypass exists in Convers Lab WPSubscription due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendatio...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RC...
Exploit for Off-by-one Error in Sudo_Project Sudo
CVE-2021-3156 – Sudo Buffer Overflow Linux Baron Samedit...
Exploit for Path Traversal in Apache Http_Server
Vulnerability Research Lab Project Summary This project p...
Exploit for Path Traversal in Apache Http_Server
Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone...
Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server
CVE 2025-5548 Este es el repositorio principal donde document...
EUVD-2025-208655
In UNIX Fourth Research Edition v4, the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab...
CVE-2025-71263
In UNIX Fourth Research Edition v4, the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab...
CVE-2025-71263
In UNIX Fourth Research Edition v4, the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes. A local user can exploit this to gain root privileges. It is unlikely that UNIX v4 is running anywhere outside of a very small number of lab...
Exploit for Off-by-one Error in Sudo_Project Sudo
CVE-2021-3156 — "Baron Samedit" Lab & Exploit This repository...
actix-hash (0.5.0), actix-web-lab-derive (0.21.0) +10 more potentially affected by unknown CVE via actix-web-lab (>=0.18.9, <=0.21.0)
actix-web-lab CARGO version =0.18.9, =0.1.16, =0.1.0, =0.2.2, =0.1.1, =0.1.0, =0.1.0, =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-VHJ5-X93P-67JW...
actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects
Summary actix-web-lab redirect middleware uses request-derived host information to construct absolute redirect URLs for example, https://hostnamepath. In deployments without strict host allowlisting, an attacker can supply a malicious Host header and poison the Location response header, causing...
GHSA-VHJ5-X93P-67JW actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects
Summary actix-web-lab redirect middleware uses request-derived host information to construct absolute redirect URLs for example, https://hostnamepath. In deployments without strict host allowlisting, an attacker can supply a malicious Host header and poison the Location response header, causing...
actix-web-lab has host header poisoning in redirect middleware can generate attacker-controlled absolute redirects
actix-web-lab redirect middleware uses request-derived host information to construct absolute redirect URLs for example, https://hostnamepath. In deployments without strict host allowlisting, an attacker can supply a malicious Host header and poison the Location response header, causing open...
Exploit for CVE-2026-27944
CVE-2026-27944 - Nginx-UI Unauthenticated Backup Download !...
pentesting-writeups
🔐 Pentesting Writeups Personal penetration testing document...
challenge-yourself-level-1
Attack Path Lab !GitHubhttps://img.shields.io/badge/GitHu...