CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

CVE-2018-20580

CVE-2018-20580 A proof of concept for ReadyAPI 2.5.0/2.6.0 Remote Code Execution with interactions. Intro In December 2018 I found a new vulnerability in the ReadyAPI. It allows an attacker to execute a remote code on the local machine putting in danger the ReadyAPI users including developers,...

CVE-2024-34102

CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapikk for the original code base. ★ Description CVE-2024-34102 : Adobe Commerce XXE vulnerability description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer incoming calls, manipulate call settings, access & control notifications sent by other apps, control nearby devices, access microphone to recor...

CVE-2025-0411-PoC

更多PoCs at: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compile with MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static After compilation, compress the exe with 7z and execute twice. Since this vulnerability requires user interaction, the generated compressed file needs...

CVE-2024-37383-POC

CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Introduction This repository contains a proof of concept for the XSS vulnerability in roundcube: CVE-2024-37383. More information about this vulnerability can be found: here Steps Start Roundcube If you don't have an instance of roundcube...

cve-2024-30350-research-notes

CVE-2024-30350 研究笔记 概述 CVE-2024-30350 是 Foxit PDF Reader 中的一个越界读取信息泄露漏洞。该问题由 Trend Micro Zero Day Initiative 以 ZDI-24-333 发布，并在披露前以 ZDI-CAN-22708 进行跟踪。 公开公告将漏洞区域描述为 Foxit PDF Reader 对 Annotation 对象的处理。精心构造的 PDF 可使应用程序读取超出已分配缓冲区末尾的内容。利用该漏洞需要用户交互，例如打开恶意 PDF...

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

Guten Free Options - Cross Site Scripting

Guten Free Options WordPress plugin = 0.9.5 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to click malicious link. id: CVE-2024-13492 info: name: Guten Free...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Moniker Link Vulnerability Write-up This repository contains a technical write-up of CVE-2024-21413 , a vulnerability related to the handling of Moniker Links in Microsoft Outlook that allows attackers to bypass Protected View and leak NTLMv2 credentials through user interaction...

CVE-2026-20841-PoC

CVE-2026-20841-PoC CVE-2026-20841 的概念验证（PoC） CVE-2026-20841 – 详细信息 CVE-2026-20841 是一个影响 Microsoft 记事本（Notepad）的漏洞，特制的输入可触发意外的命令执行。 该问题源于对某些文件内容或执行引用的不当处理。当用户在记事本中打开或与特制文件交互时，可能允许执行系统命令，例如 cmd.exe、powershell.exe 或其他二进制文件。 基本信息 CVE ID：CVE-2026-20841 受影响组件：Microsoft 记事本（Notepad） 漏洞类型：命令执行...

CVE-2026-21509-PoC

CVE-2026-21509 — 用于防御可见性的教育性虚拟 PoC ⚠️ 本仓库提供的是一个无害、非利用性质的 Proof of Concept。 其目的是支持防御性研究 、EDR/AV 可见性测试 以及培训 。 它不利用 CVE‑2026‑21509，仅包含虚拟 OLE 工件 。 📝 概述 本仓库包含一个教育性 PoC ，用于模拟与 CVE‑2026‑21509 （一个 Microsoft Office 安全功能绕过 漏洞）相关的结构标记。 该 PoC 生成一个无害的 DOCX 文件 ，其中包含虚拟的嵌入式 OLE 组件，用于遥测观察 、沙箱分析 、EDR 规则验证 以及 SOC 培训...

atril_cbt-inject-exploit

CVE-2023-44452、CVE-2023-51698：Linux Mint Xreader/MATE Atril CBT 文件解析参数注入远程代码执行漏洞 一个影响使用 MATE、Cinnamon 及部分 Xfce 桌面环境的流行 Linux 操作系统的严重一键 RCE/命令注入漏洞。 受影响的操作系统： Linux Mint Kali Linux（安全专业人员、研究人员中流行的操作系统） Parrot OS（安全专业人员、研究人员中流行的操作系统） Ubuntu-Mate Xubuntu Fedora Cinnamon Fedora Mate Manjaro Mate Manja...

CVE-disclosures

CVE-2026-3171 与 CVE-2026-3170 – Archana M 由 Archana M 发布的官方漏洞披露。 🔹 CVE-2026-3171 产品： SourceCodester / Patrick Mvuma 患者候诊区排队管理系统 1.0 漏洞类型： 跨站脚本（CWE-79） 受影响文件： /queue.php 攻击向量： 远程 用户交互： 需要 CVSS v3.1： 3.5（AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N） 状态： 已公开披露 描述 对用户输入（firstname / lastname）的中和不当，导致跨站脚本（XSS）漏...

CVE-2024-2242

CVE-2024-2242 Contact Form 7 history.pushState'', '', '/'; document.forms0.submit;...

CVE-2025-60656

CVE-2025-60656 - Stored Cross-Site Scripting XSS on Homepage | ---|--- Researchers| DotAdrien Severity| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Description A stored Cross-Site Scripting XSS vulnerability exists on the homepage via the "Recent Ads" module. The...

CVE-2023-23397

CVE-2023-23397 Proof of Concept This is a proof of concept PoC exploit for CVE-2023-23397, a vulnerability in the Windows Microsoft Outlook client. Prerequisites Python 3 pywin32 package How to use Windows 1. Install the required pywin32 package by running pip install pywin32. 2. Run the script...