123405 matches found
CVE-2019-1006
CVE-2019-1006 Usage: Enter "python CVE-2019-1006.py "url"" in the terminal, where url is the URL of the RDG Gateway server to be tested. For example: python CVE-2019-1006.py "https://www.aaa.com/"...
CVE-2021-43530-UXSS-On-QRcode-Reader-
CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...
CVE-2022-1592
CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...
CVE-2024-56331
CVE-2024-56331 Uptime-Kuma : Local File Inclusion LFI via Improper URL Handling in Real-Browser monitor Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the...
CVE-2021-42237-SiteCore-XP
CVE-2021-42237-SiteCore-XP Similarly, put the URLs to be detected in target.txt Register and modify the DNSLOG platform yourself...
CVE-2023-28432
CVE-2023-28432 Minio is an object storage service written in Go. It implements most of the Amazon S3 cloud storage service interfaces and can be seen as an open-source version of S3, making it very suitable for storing large volumes of unstructured data such as images, videos, log files, backup...
CVE-2021-26084
CVE-2021-26084 Affected Versions Versions 6.13.23 6.14.0 ≤ Version 7.4.11 7.5.0 ≤ Version 7.11.6 7.12.0 ≤ Version 7.12.5 Cause and Exploitation Method Confluence uses a framework to map URLs to Java classes, creating what is known as an "action". Action URLs end with ".action" and are defined in...
CVE-2022-30190
CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...
CVE-2022-45299
CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...
cve-2023-20198-poc-cisco
CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...
CVE-2024-39199
CVE-2024-39199 / CNVD-2024-31551 write url in url.txt and run 100000CMS-POC.py to check...
CVE-2025-30208
CVE-2025-30208 POC CVE-2025-30208 pip install -r requirements.txt Features: -u specify url scan -r specify txt file scan...
phpinfo-files-leaks
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install phpinfo-file-leaks Run bellow command to check phpinfo-file-leaks -h Configurations 2. We integrated with the Telegram API to...
CVE-2022-26134-cve1
CVE-2022-26134RCE Installation git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: pocsuite -r CVE-2022-26134RCE.py -u url Multiple URLs: pocsuite -r...
CVE-2026-116205 YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying |URL wiki syntax to the render handler. Attackers can pass the syntax in the content parameter of the page render handler to reach internal...
CVE-2026-116205
Versions of YesWiki before 4.7.0 are vulnerable to an unauthenticated server-side request forgery (SSRF) vulnerability. The root cause lies in the render handler , which fails to properly sanitize the [[|URL]] wiki syntax . Remote attackers can exploit this by supplying the malicious syntax in th...
CVE-2026-116196
Rclone versions prior to v1.75.2 are vulnerable to a credential exposure flaw in the b2 backend . When using the --b2-download-url option, the application may leak live account Authorization tokens and SSE-C keys during HTTP redirects. Specifically, attackers can capture cleartext B2 tokens via s...
CVE-2026-116196 Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authorization token and SSE-C keys on HTTP redirects from --b2-download-url hosts. Attackers can observe a same-host HTTPS-to-HTTP downgrade redirect to capture the cleartext B2 token,...
CVE-2021-24891-Simulation
A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...