CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

CVE-2026-48849-Roundcube-Webmail-Stored-XSS

CVE-2026-48849 - Stored XSS, HTML Injection & CSS Injection in Roundcube Webmail Overview This repository contains a Proof-of-Concept PoC for CVE-2026-48849 , a Stored Cross-Site Scripting XSS, HTML Injection, and CSS Injection vulnerability in Roundcube Webmail. The vulnerability allows...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

CodeIgniterXor

CodeIgniterXor PoC script to decode CodeIgniter = 2.1.4 session cookies that use xorencode method. Full details availalbe on on the following blog post: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability Usage break.py This is the main script, and given a target URI will...

CVE-2025-51860

CVE-2025-51860 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Stored Cross-Site Scripting XSS in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by craftin...

CVE-2021-46067

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...

Superset_auth_bypass_check

Supersetauthbypasscheck Apache-Superset authentication bypass vulnerability CVE-2023-27524 detection tool Fix date: 2023.8.3 Fixed session invalidation caused by hardcoded session expiry time, introduced flasksessioncookiemanager tool to generate real-time sessions for detection. Fixed the bug...

CVE-2025-60374

CVE-2025-60374 CVE-2025-60374: Stored Cross-Site Scripting XSS in Perfex CRM Chatbot ⚠️ Security Advisory A critical Stored Cross-Site Scripting vulnerability in Perfex CRM's chatbot feature 📋 Overview A stored cross-site scripting XSS vulnerability in the chatbot component of Perfex CRM, prior to...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

CVE-2025-61319

CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...

CVE-2025-60880

CVE-2025-60880: Stored Cross-Site Scripting XSS in Bagisto Admin Panel An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be...

CVE-2022-35497

In Trimble's TM4WEB =22.2.0 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint. Specifically, the three cookies used for maintaining sessions are UID, rstring...

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

CVE-2025-34157

Stored XSS in Coolify delete flow CVE-2025-34157 Affects: Coolify ≤ v4.0.0-beta.420.6 Fixed in: v4.0.0-beta.420.7 Severity: Critical 9.4 CVSS 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Improper Input Validation Summary A...

magento2-session-reaper-patch

Magento 2 Session Reaper Patch for CVE-2025-54236 Patch for CVE-2025-54236a.k.a Session Reaper which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or...

CitrixBleed-2-CVE-2025-5777-PoC-

CitrixBleed 2 CVE-2025-5777 Ultimate Analysis An Out-of-Bounds Memory Read in NetScaler ADC / Gateway — A Comprehensive Guide from Root Cause to Offensive and Defensive Exercises poc usage: python3 poc.py https://gateway.example.com exp usage: python3 exp.py https://gateway.example.com admin...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

Session Persistence After Enabling 2FA Overview The Nagios Fusion application version 2024R1.2 and 2024R2 contains a high security flaw where existing sessions remain valid even after enabling Two-Factor Authentication 2FA. Specifically, when 2FA is enabled for an administrator account, the...

CVE-2025-38561

CVE-2025-38561 ksmbd: PreauhHashValue race condition If client send multiple session setup requests to ksmbd, PreauhHashValue race condition could happen...

CVE-2026-37196

CVE-2026-37196 – Stored Cross-Site Scripting XSS in nirix traq v3.9.0 Overview A Stored Cross-Site Scripting XSS vulnerability exists in nirix traq v3.9.0 , where user-supplied input in the ticket description field is improperly sanitized before being rendered in the application interface. This...