320887 matches found
CVE-2021-29447-PoC
CVE-2021-29447 Proof-of-Concept ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected versions: Wordpre...
Sequelize-1day-CVE-2023-25813
CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...
cve-2021-38314
CVE-2021-38314 Python Exploit Detail The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a given site but deterministic and...
lazylist-cve-poc
CVE-2022-36944 payload generator This mini-project is created to demonstrate proof of concept of CVE-2022-36944 vulnerability. It is similar to ysoserial, but generates payload only for this CVE with LazyList class. Quick FAQ What artifacts bring the vulnerability? org.scala-lang:scala-library wi...
Malware in @library-wide/library-shell
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-2020-SSRF-via-URL-Parser-Differential
CVE-2026-2020 – SSRF via URL Parser Differential Program Code Python vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed = urllib.parse.urlparseurl Only allow...
CVE-2025-32462_32463-Lab
CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape 🔒 For educational purposes only. Do not use on systems you don’t own or...
ROOT-APP-MAVEN-AIKIDO-2024-10351 AIKIDO-2024-10351 in org.springframework:spring-webmvc - Patched by Root
Root has patched AIKIDO-2024-10351 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
ldapsdk
UnboundID LDAP SDK for Java Download the Latest Release of the LDAP SDK Here The UnboundID LDAP SDK for Java is a fast, powerful, user-friendly, and completely free and open source Java library for communicating with LDAP directory servers. It offers better performance, better ease of use, and mo...
ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root
Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-102282 CVE-2026-102282 in adm-zip - Patched by Root
Root has patched CVE-2026-102282 in the adm-zip package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
Openssl_G2.5_New
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2023-38408
OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...
ROOT-APP-PYPI-CVE-2026-22702 CVE-2026-22702 in virtualenv - Patched by Root
Root has patched CVE-2026-22702 in the virtualenv package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1791806950 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.2.1-tuxcare.5...
ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root
Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64642 CVE-2026-64642 in next - Patched by Root
Root has patched CVE-2026-64642 in the next package for Root:npm. Multiple fixed versions available...