CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 प्रमाणित RCE PoC इस रिपॉजिटरी में एक प्रूफ-ऑफ-कॉन्सेप्ट स्क्रिप्ट है, जो सुरक्षा अनुसंधान और अधिकृत पेनिट्रेशन परीक्षण के लिए बनाई गई है और यह CVE-2025-2945 भेद्यता से संबंधित है, जो pgAdmin4 के कुछ संस्करणों को प्रभावित करती है। यह समस्या SQL एडिटर तक पहुँच रखने वाले एक...

CVE-2026-65694-PoC

CVE-2026-65694 — Leitura Arbitrária de Arquivos Não Autenticada no Microweber CMS Prova de conceito para CVE-2026-65694 , uma leitura arbitrária de arquivos por path-traversal não autenticado no Microweber CMS. Um atacante não autenticado pode ler qualquer arquivo que o usuário do servidor web...

CVE-2026-44262

dedoc/scramble RCE CVE-2026-44262 PoC 📜 Descrição CVE-2026-44262 é uma vulnerabilidade de Execução Remota de Código não autenticada no dedoc/scramble, um gerador de documentação de API para Laravel. NodeRulesEvaluator::doEvaluateExpression chama extract$variables antes de eval"return $code;"...

CVE-2026-26903-PoC

CVE-2026-26903 PoC رفض الخدمة عبر العودية غير المحدودة في دالةreplaceEqualDeep في TanStack Query يمكن لتحديث استعلام واحد مصمم بعناية يحتوي على كائنات متداخلة بعمق أن يجمد خيط JavaScript إلى أجل غير مسمى ، مما يسبب عدم استجابة كاملة للتطبيق. لا يلزم أي مصادقة أو صلاحيات خاصة. الإصدارات المتأثرة ت...

CVE-2012-1823

Injeção de Argumento PHP CGI CVE-2012-1823 Descrição sapi/cgi/cgimain.c no PHP anterior a 5.3.12 e versões 5.4.x anteriores a 5.4.2, quando configurado como script CGI também conhecido como php-cgi, não lida corretamente com strings de consulta que não possuem o caractere = sinal de igual, o que...

CVE-2026-55993

Reprodutor de Injeção de Cabeçalho do camel-atmosphere-websocket CVE-2026-55993 Este projeto demonstra uma injeção de cabeçalho de mensagem no componente camel-atmosphere-websocket do Apache Camel, rastreada como CVE-2026-55993. O consumidor WebSocket copia os parâmetros de consulta da conexão pa...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

Injeção SQL Baseada em Tempo no ZoneMinder CVE-2024-51482 📌 Visão Geral da Vulnerabilidade ID do CVE: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Versões afetadas: ZoneMinder 1.37. até inclusive 1.37.64 Versão corrigida: 1.37.65 📖 Descrição Este repositório contém um exploit de prova de conceito...

CVE-2024-50498

CVE-2024-50498 WP Query Console body background-color: fff; color: 222; font-family: sans-serif; pre margin: 0; font-family: monospace; a:link color: 009; text-decoration: none; background-color: fff; a:hover text-decoration: und...

CVE-2025-26794

CVE-2025-26794 : Injection SQL aveugle dans Exim 4.98 SQLite DBM - writeup d'exploitation Rapport Exim : https://www.exim.org/static/doc/security/CVE-2025-26794.txt J'ai découvert cette vulnérabilité lors d'une revue de code manuelle. Détails de la vulnérabilité : Problème Les paramètres SQL,...

CVE-2024-50340

CVE-2024-50340 POC आवश्यकताएँ PHP कॉन्फ़िगरेशन फ़ाइल php.ini में registerargcargv विकल्प सक्षम होना चाहिए। यह सेटिंग कमांड-लाइन तर्कों और क्वेरी पैरामीटर्स को $SERVER'argv' में लोड करती है। https://www.php.net/manual/en/ini.core.phpini.register-argc-argv कमजोर कोड का स्पष्टीकरण यह Symfony कोड कुछ...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

CVE-2026-82246

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...

CVE-2026-82241

Budibase backend-core @budibase/backend-core, as used by @budibase/server omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist DEFAULTBLACKLIST used by REST datasource query previews. When the default blacklist is active i.e., a self-hosted deployment has not defined...

OpenSource-ERP-SQL-Injection

OpenSource-ERP-SQL-Injection L'applicazione OpenSource ERP presenta una vulnerabilità di SQL Injection. CVE-2019-5893 https://vulners.com/cve/CVE-2019-5893 https://www.exploit-db.com/exploits/46118 PoC - Ottieni il nome del database root@kitploit: POST /db/utils/query/data.xml HTTP/1.1 User-Agent...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — Telecamere IP / DVR / NVR Hikvision Autenticazione Impropria — Escalation dei Privilegi Tramite Parametro di Query Artificioso | ---|--- ID CVE| CVE-2017-7921 Classe di Vulnerabilità| CWE-287: Autenticazione Impropria Punteggio CVSS v3.0 Base| 10.0 Critico —...

CVE-2025-30208

CVE-2025-30208 检测工具 Analisi della vulnerabilità Analisi e riproduzione della vulnerabilità di lettura arbitraria di file in Vite CVE-2025-30208 Introduzione Questo strumento viene utilizzato per rilevare se il sistema di destinazione è affetto dalla vulnerabilità CVE-2025-30208. Tale vulnerabilit...

CVE-2024-24919

CVE-2024-24919 Ich übernehme keinerlei Verantwortung : Installation git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 FOFA-Abfrage root@kitploit: title="Check Point SSL Network...

InfluxDB-Exploit-CVE-2019-20933

InfluxDB Exploit CVE-2019-20933 Exploit für die InfluxDB CVE-2019-20933 Schwachstelle. InfluxDB vor Version 1.7.6 hat eine Authentifizierungsumgehungsschwachstelle in der authenticate-Funktion in services/httpd/handler.go, weil ein JWT-Token einen leeren SharedSecret auch als gemeinsames Geheimni...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb esecuzione remota di codice | cve-2022-22980 poc Descrizione Un'applicazione Spring Data MongoDB è vulnerabile a SpEL injection quando utilizza metodi di query annotati con @Query o @Aggregation con espressioni SpEL che contengono segnaposto di parametri d...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 – PHP-CGI-Argumentinjektion unter Windows „WorstFit“ Überblick CVE-2024-4577 ist eine kritische Remote-Code-Ausführungsschwachstelle in der CGI-Implementierung von PHP unter Windows. Sie umgeht den Fix für die ursprüngliche CVE-2012-1823, indem sie die...