503 matches found
WannaRace
🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...
CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX
FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...
CVE-2025-71455
vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and...
EUVD-2025-211253
vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and...
CVE-2025-71455 vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service
vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and...
CVE-2025-71455
The vtenext application, versions prior to 25.02.2 , is vulnerable to a session identifier disclosure in the Touch web service endpoint. This flaw allows an attacker capable of executing scripts within the vtenext origin (e.g., via cross-site scripting ) to read the PHPSESSID value. By accessing ...
PT-2026-137121
vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. Attackers who can run script in the vtenext origin, such as through cross-site scripting, can bypass the HttpOnly flag and...
CVE-2024-22120-RCE-with-gopher
Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hostid: 10107 PHP...
php-cve-2026-10961x-lab-poc
php2shell lab — PHP CVE-2026-109618 / CVE-2026-109619 Lab reproduction and vulnerability-research package for the PHP 8.5.11 php2shell class CVE-2026-109618, CVE-2026-109619, October 2026. Status: Proven — self-contained RCE four plain HTTP requests, no debugger, no local access, plus...
CVE-2021-46067
CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...
CVE-2025-62369
CVE-2025-62369 PoC This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener nc -lvnp 2. Run the exploit python3 exploit.py -u "http://:" -s "" -i -p : Xibo CMS server IP : Xibo CMS server port :...
CVE-2026-61673
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
CVE-2026-61673
Prior to version 3.8.7 , the web manager WeGIA for charitable institutions is vulnerable to a stored DOM cross-site scripting (XSS) vulnerability in web/html/memorando/listar_despachos.php. The root cause is the unsafe handling of the texto field: while FILTER_SANITIZE_SPECIAL_CHARS is applied du...
CVE-2026-61673 WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
CVE-2026-61673 WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
EUVD-2026-113398
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
CVE-2026-61673
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in "web/html/memorando/listardespachos.php" results from unsafe handling of the "texto" field. The affected flow spans "web/controle/memorando/DespachoControle.php" and...
PT-2026-132848
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listar despachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
CVE-2026-61673: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions
WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...
