CVE-2020-15392

CVE-2020-15392 Enumeración de Usuarios en Supravizio BPM 10.1.2 Descripción Se encontró una vulnerabilidad de enumeración de usuarios en Supravizio BPM, versión 10.1.2. Este problema ocurre durante la recuperación de contraseña, donde una diferencia en los mensajes podría permitir a un atacante...

BigFinger

CVE-2023-46747 - Big-IP RCE No autenticado Este es un script de Python3 para explotar la vulnerabilidad de ejecución remota de código no autenticado CVE-2023-46747 en dispositivos F5 BIG-IP a través de la interfaz TMUI. Básicamente, si esta vulnerabilidad impacta, obtienes una shell sin...

below-log-race-poc

below-log-race-poc CVE-2025-27591 Exploit Below privilege escalation Description This repository contains a proof-of-concept exploit for CVE-2025-27591 , a privilege escalation vulnerability in the below utility. The issue arises because below mishandles log files under /var/log/below/, allowing...

CVE-2026-13355

The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populateviaquerystring function in the mb-frontend-submission component unconditionally overrides the form's target objectid fr...

CVE-2026-19478-PoC

CVE-2026-19478 PoC Unauthenticated remote code-injection in GitLab's GraphQL layer that lets an attacker modify or delete public projects and user data with a single crafted query. No authentication, no user interaction, no special privileges...

codoforum

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3 Listed in: Exploit-db, Cve Mitre and The daily swig While I was searching for a free forum software for our community I found Codoforum. After installing it We Vyshnav Vizz tried a few simple XSS payloads to ensure the security and suddenl...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2024-48644

CVE-2024-48644 September, 2024 CVE Details CVE: https://vulners.com/cve/CVE-2024-48644 NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-48644 Tenable: https://www.tenable.com/cve/CVE-2024-48644 Account Enumeration and Guessable User Account Summary Accounts enumeration vulnerability in the Login...

CVE-2026-13355

The Meta Box AIO WordPress plugin (versions ≤ 3.11.0 ) is vulnerable to unauthenticated Privilege Escalation to Administrator due to a chained flaw in its bundled components. The mb-frontend-submission component lacks authorization checks in the populate_via_query_string() function, allowing atta...

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

CVE-2025-4334

🔓 Simple User Registration = 6.3 - Unauthenticated Privilege Escalation 📄 Description The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplie...

CVE-2023-42793

CVE-2023-42793 description A security vulnerability in JetBrains TeamCity allows an attacker to create a new user given by the attacker with administrative privileges. Usage example ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

CVE-2026-60004-PoC

CVE-2026-60004: Gitea Diffpatch API Remote Code Execution !WARNING This repository is intended exclusively for authorized security research and controlled laboratory testing. Do not run the proof of concept against systems you do not own or have explicit permission to assess. Overview...

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage root@kitploit: $ python wpUsersScan.py URL How to install Clone Clone the repository with: root@kitploit: $ git clone...

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

container-escape-ebpf

White Paper https://www.scs-europe.net/dlib/2026/2026-0321.html Assumptions Host runs vulnerable version of runc: For CVE-2025-31133: 1.2.7 and below, 1.3.0-rc.1 through 1.3.2, 1.4.0-rc.1 and 1.4.0-rc.2. For CVE-2024-21626: 1.0.0-rc93 through 1.1.11. Unprivileged user is able to create containers...

wordpress-jetpack-broken-access-control-exploit

wordpress-jetpack-broken-access-control-exploit This is a Python3 program that exploits Jetpack 13.9.1 broken access control vulnerability CVE-2024-9926. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not...

CVE-2025-70829

CVE-2025-70829: Information Exposure in Datart 中文文档 1. Vulnerability Overview CVE ID : CVE-2025-70829 Product : Datart Version : v1.0.0-rc.3 Vulnerability Type : Information Exposure An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive dat...