CVE-2026-103664

MISP contains a reflected cross-site scripting XSS vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via the URL, was passed directly into inline JavaScript within the rendered HTML response without any sanitization or type enforcement. An attacker who c...

CVE-2018-16987

CVE-2018-16987 Esta es una vulnerabilidad de almacenamiento de texto claro de información sensible y exposición de información sensible que encontré en Squash TM durante una prueba de penetración. SquashTM Squash TM es una interfaz web utilizada para gestionar casos de prueba. Enlace al proyecto...

CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Teléfono SIP de la serie Mitel 6900w: bypass temporal de autenticación Detalles de la vulnerabilidad Resumen Consiste en una vulnerabilidad de bypass temporal de autenticación en el panel web administrativo HTTP de varios productos Mitel. Impacto Permite a un...

BlackNET

BlackNET 😈 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro desarrollado con VB.NET. Acerca de BlackNET 🤓 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro construido con VB.NET. Este controlador de botnets viene con muchas funciones y ...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

Admin-Panel_Finder

Admin Panel Finder Una extensión de Burp Suite que enumera interfaces de administración de infraestructura y aplicaciones. Referencias OWASP: Clasificación : Pruebas de Seguridad en Aplicaciones Web 02-Pruebas de Gestión de Configuración y Despliegue OTG v4 : OWASP OTG-CONFIG-005 WSTG :...

Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2022_7628)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227628 advisory. php: Special character breaks path in xml parsing CVE-2021-21707 php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 php-pear:...

CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel también conocido como Cyber Panel Denegación de Servicio Descripción Se descubrió una vulnerabilidad de denegación de servicio DoS en Cyber Panel que permite a cualquier usuario autenticado reiniciar la base de datos enviando solicitudes al endpoint...

grafana: Stored cross-site scripting in the Geomap panel allows privilege escalation

A flaw was found in Grafana. A user with an Editor role can exploit a stored cross-site scripting XSS vulnerability in the Geomap panel. This occurs because the Geomap panel loads map styles from a URL and inserts the style's attribution field into the page without proper sanitization. By...

CVE-2024-41958-PoC

CVE-2024-41958-PoC This is a small proof of concept for CVE-2024-41958. It is possible to bypass the TFA authentication on the admin panel. Affected versions: 2024-07 Prerequisites needed for the CVE to function: Password and username for an account without TFA. Password and username for an accou...

CVE-2025-25347

CVE-2025-25347 Overview This tool is used to test the vulnerability CVE-2025-25347 in QingLong Panel, an open-source platform for task automation management. This vulnerability allows Remote Code Execution RCE because the panel does not implement adequate input validation and access control on...

CVE-2022-44877-CWP7

CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Ejecución remota de código RCE CVE-2022-44877 Sin autenticación El repositorio se actualizará pronto con el POC...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

CVE-2022-31269

CVE : CVE-2022-31269 Título del Exploit: Nortek Linear eMerge E3-Series - La divulgación de información permite acceder al panel de administración...

CVE-2025-63420

CVE-2025-63420 CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions. CWE CWE-79 — Improper Neutralization of Input During Web Page Generation Cross-site Scripting CVSS v3....

Etherpad Lite <1.6.4 - Admin Authentication Bypass

Etherpad Lite before 1.6.4 is exploitable for admin access. id: CVE-2018-9845 info: name: Etherpad Lite 1.6.4 - Admin Authentication Bypass author: philippedelteil severity: critical description: Etherpad Lite before 1.6.4 is exploitable for admin access. impact: | An attacker can bypass the admi...

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

Sidekiq < 7.0.8 - Cross-Site Scripting

An XSS vulnerability on a Sidekiq admin panel can pose serious risks to the security and functionality of the system. id: CVE-2023-1892 info: name: Sidekiq 7.0.8 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: critical description: | An XSS vulnerability on a Sidekiq admin pan...