CVE-2026-37064

CVE-2026-37064 User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user...

Imperva_gzip_WAF_Bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

CVE-2026-112381

Apache Traffic Server versions 9.2.15 , 10.1.4 , and 10.2.0 are vulnerable to a null pointer dereference in the net_write_io function. The flaw is a timing-dependent race condition triggered when a client POST request is torn down via a half-close while a chunked origin response is being reparsed...

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stored cross-site scripting XSS in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Nagios Log Server 2.1.7 and older versions are affected...

CVE-2019-2725-POC

CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE not assigned yet Kentico Xperience 13 CMS - Staging Service Authentication Bypass Check Detection in Action python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | |...

CVE-2023-49496_PoC

CVE-2023-49496PoC Description UCServer is an advanced converged communication server. Shanghai Shupin Information Technology Co., Ltd. UCServer has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive database information. POC POST /login/wwxcorpInfo/ HTTP/1...

CVE-2017-9841

phpunit-shell ⭐ a simple python3 script to exploit CVE-2017-9841. the exploit - CVE-2017-9841 ❗ simple script that exploits a remote code execution vulnerability found in PHPUnit before 4.8.28 and 5.x before 5.6.3. makes a post request to the target with user input system commands...

CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a POST request to /wsman with the content of payload.xml and only change the command with your desired one, AS POC, only id command is executed. Source: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Follow if you like :...

CVE-2022-24707

PoC for CVE-2022-24707 SQL Injection Vulnerability on Puncher plugin. A POST request can be crafted to exploit SQL Injection and leak database contents. This is tested on Anuko Time Tracker 1.20.0.5640. python3 exploit.py --help usage: exploit.py -h --username USERNAME --password PASSWORD --host...

Imperva_gzip_bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

CVE-2023-42793

CVE-2023-42793 - TeamCity Admin Account Creation lead to RCE use exploit.py first to creat administrator account for you and then use rce.py to execute commands on the target, and for reverse shell check this exploit script Description This script exploits CVE-2023-42793 to create an admin accoun...

cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473: Unauthenticated Denial of Service in ZTE Routers affecting 140K+ devices worldwide 17+ models Technical breakdown of CVE-2026-34473, published from the original disclosure set and firmware-analysis artifacts. Live site:...

Mass-Scanner-CVE-2026-2631

⚡ CVE-2026-2631 Async Mass Checker Private async mass-checker for internal WordPress validation 🚨 Warning This tool performs a destructive validation. It sends a POST request to the target endpoint and may changeshopsecret on vulnerable targets. Use it only on systems you own or are explicitly...

CVE-2023-28432

MinIO vulnerability exploit CVE-2023-28432 Description This python3 script is designed to exploit CVE-2023-28432, which potentially affects certain MinIO server configurations. The script makes a POST request to a specified hostname, attempting to retrieve sensitive environment variables such as...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

CVE-2019-14223

CVE-2019-14223: Open Redirect in Alfresco Share The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulation the “failure” parameter an attacker can redirect a victim to a malicious website over any protocol the attacker desires E.g. http,...

CVE-2024-24919

Mass Auto Scanner for CVE-2024-24919 This script is designed to scan a list of URLs for the CVE-2024-24919 vulnerability on remote Check Point firewalls. It attempts to exploit the vulnerability by sending a malicious POST request to extract specified files from the target servers. Running the...

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

netwave-dosvulnerability

Netwave IP Camera server vulnerable to unauthenticated Denial of Service via one single huge POST request on any firmware. CVE| Description ---|--- CVE-2018-6479| Unauthenticated remote Denial of Service vulnerability CVSS| Score| Details ---|---|--- 3| 7.3|...