trust-boundary-ctf

🐘 Trust Boundary: MCP Session Isolation CTF The console reads Session Active. Every tool call succeeds. The admin OAuth token is in every response. Trust Boundary is a browser-based CTF lab built around a real session isolation failure in a locally-running MCP server. The vulnerability is not...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 Authenticated RCE Linux/POSIX This repository contains a Proof of Concept PoC script for CVE-2024-2044 , a critical vulnerability that combines Authenticated Path Traversal and Unsafe Deserialization in pgAdmin 4 versions 8.3 and below running in a Linux/POSIX...

CVE-2020-25399

CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...

CVE-2026-22804

Termix Stored XSS PoC GHSA-m3cv-5hgp-hv35 This repository contains a Proof of Concept PoC exploit for the Stored Cross-Site Scripting XSS vulnerability in Termix, which can lead to Local File Inclusion LFI in the Electron environment and Session Hijacking. Vulnerability Details Advisory :...

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Session Fixation in Vvveb CMS v1.0.6.1 Author: Andrew Paul Date of Discovery: June 9th, 2025 Vendor: Vvveb Vendor URL: http://vvveb.com Vendor GitHub: https://github.com/givanz/Vvveb Affected Version: 1.0.6.1 and likely prior versions CVE ID: CVE-2025-8517 Summary A Session Fixation vulnerability...

CVE-2026-39324

CVE-2026-39324 Exploit PoC Rack::Session::Cookie decrypt failure falls back to accepting unencrypted cookies | ---|--- Advisory| GHSA-33qg-7wpp-89cq Package| rack-session RubyGems Affected| = 2.1.1 Patched| 2.1.2 Summary Rack::Session::Cookie with secrets: should only accept encrypted cookies. Bu...

Kotaemon-CVE-2025-56526-56527-disclosure

Kotaemon CVE-2025-56526 & CVE-2025-56527 Public Disclosure Stored Cross-Site Scripting in the Kotaemon Information Panel combines with plaintext credential storage in localStorage, enabling full session compromise from a single malicious PDF upload. Executive Summary Affected Product / Versions :...

security-advisories

🔐 Security Advisories by Minhajul Taivin Welcome to the official repository of my published CVE disclosures. This repository contains detailed security advisories, proof-of-concept information, mitigation strategies, and technical analysis for vulnerabilities I have discovered. 📌 Published CVEs 1️⃣...

poc-cribl-rce

Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...

CVE-2025-67730

CVE-2025-67730 – Stored Cross-Site Scripting XSS Overview CVE ID: CVE-2025-67730 Vulnerability Type: Stored Cross-Site Scripting XSS Severity: Medium–High context-dependent This vulnerability allowed authenticated users to inject malicious HTML and JavaScript into description fields of Job , Cour...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Stored XSS in Decap CMS Steps 1. Login as Contributor/Editor low privilege. 2. Create a new blog entry. 3. Insert the payload into one of the vulnerable fields e.g., title. 4. Save the entry. 5. Login as Admin high privilege. 6. Open the entry in Preview. 7. Payload executes in t...

POC-CVE-2025-24813

CVE-2025-24813 – Demonstration Environment PoC This repository contains a simple application built to observe the behavior of CVE-2025-24813, a recent vulnerability in Apache Tomcat related to the use of the DefaultServlet with writing enabled readonly=false, allowing unsafe write operations via...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

CVE-2016-6271

CVE-2016-6271 CVE-2016-6271 impacts libbzrtp, which is a ZRTP library developped by Belledonne Communications. This library is embedded in end-user applications, for example linphone, which is available as an Android app on Play store. Current version 3.2.7 embeds a version of libbzrtp shall not ...

CVE-2025-24813-PoC-exploit

CVE-2025-24813-PoC-exploit Apache Tomcat Deserialization RCE ❯ python3 exploit.py http://localhost:8080/ "id" ============================================================ CVE-2025-24813 - Apache Tomcat Partial PUT RCE ============================================================ Target:...

challack

Proof-of-concept code for CVE-2016-5696 This code currently allows reseting connections or injecting into sessions. The attack is implemented against both clients and servers. For detailed information, consult the original publication: Off-Path TCP Exploits: Global Rate Limit Considered Dangerous...

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" Links...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

openclaw-technical-analysis

OpenClaw Technical Analysis This repository contains my deep-dive technical reviews and code audits of the OpenClaw AI platform specifically focusing on the February 15 and February 25, 2026 builds. These reviews are grounded in raw architecture analysis, GitHub commit history, and the intersecti...