CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 und niedrigere Versionen sind anfällig für Open-Redirection-Angriffe. Schritte zur Reproduktion 1. Melden Sie sich auf Ihrem Konto an unter https://mainnet.demo.btcpayserver.org/login 2. Klicken Sie dann auf den folgenden Link...

cve-2025-55182-checker

CVE-2025-55182 Prüfer Ein portables Bash-Skript zur Erkennung verwundbarer Versionen von React Server DOM - und Next.js -Paketen, die von CVE-2025-55182 betroffen sind. Funktionen Durchsucht rekursiv alle package.json-Dateien in einem Projekt. Erkennt verwundbare Versionen von: react-server-dom-...

WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Booking and Rental Manager versions = 2.7.5...

WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Beautiful Taxonomy Filters versions = 2.4.6...

CVE-2023-49977

CVE-2023-49977 Customer Support System 1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "Address" nella pagina "customerlist" Descrizione : Customer Support System 1.0 è vulnerabile a XSS persistente. Una vulnerabilità XSS è presente nella versione 1 del Customer Support System. U...

CVE-2025-1661

CVE-2025-1661 Exploit per CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 La PoC è ora pubblicata. È stata creata solo per scopi educativi/di ricerca! Utilizzala a tuo rischio e pericolo!...

CVE-2021-41773-POC

CVE-2021-41773 Rapporto di riproduzione della vulnerabilità Panoramica della vulnerabilità CVE ID : CVE-2021-41773 Nome vulnerabilità : Vulnerabilità di path traversal in Apache HTTP Server Livello di rischio : Alto CVSS 7.5 Versioni interessate : Apache HTTP Server 2.4.49 Descrizione vulnerabili...

WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Aydan Arabadzha in WordPress Plugin Realtyna Organic IDX plugin versions = 5.4.1...

WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by G0053 in WordPress Theme CozyStay versions = 1.10.0...

linux-4.19.72_CVE-2022-36946

Kernel Linux Existem vários guias para desenvolvedores e usuários do kernel. Estes guias podem ser renderizados em vários formatos, como HTML e PDF. Por favor, leia primeiro Documentation/admin-guide/README.rst. Para construir a documentação, use make htmldocs ou make pdfdocs. A documentação...

CVE-2024-35511

PHPGurukul Men Salon Management System 2.0 Willkommen im Repository des PHPGurukul Men Salon Management System 2.0. Dieses Projekt zielt darauf ab, ein robustes System für das Herren-Salon-Management bereitzustellen. Sicherheitslücken CVE-2024-35511 Beschreibung: Angreifbar durch SQL-Injection üb...

CVE-2026-78656

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_del.php, triggered by manipulation of the ID argument. The flaw can be exploited remotely with low privileges required (authenticated user) and no user interaction, yielding low impact...

lblfixer_cve_2023_30839

LabelGrup Networks, partner ufficiale PrestaShop Modulo per PrestaShop 1.7.8.9 per correggere le vulnerabilità CVE-2023-30545, CVE-2023-30839 e CVE-2023-30839 Per ulteriori informazioni, consultare i seguenti link: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

Apache Log4j2 - Remote Code Injection

Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. id: CVE-2021-45046 info: name: Apache Log4j2 - Remote Code Injection author: ImNightmaree severity: critical description: Apache Log4j2 Thread Context Lookup Pattern is...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Progetto educativo sviluppato in Python con focus sull'analisi della vulnerabilità CVE-2021-3156 Baron Samedit , un grave difetto in sudo che permetteva l'elevazione dei privilegi locali su sistemi Linux. 📌 Obiettivo del Progetto Questo progetto è stato creato...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit Ho creato questo piccolo script per CVE-2025-24367 - Di Cacti, uno script realizzato per ottenere una webshell grazie alla vulnerabilità di Cacti nella versione 1.2.28. Utilizzo dello script: root@kitploit: python CVE-2025-24367-Exploit.py --url...

linux-4.1.15_CVE-2018-5873

Linux-Kernel, Version 4.x http://kernel.org/ Dies sind die Versionshinweise für Linux Version 4. Lesen Sie sie sorgfältig, da sie erklären, worum es geht, wie der Kernel installiert wird und was zu tun ist, wenn etwas schiefgeht. WAS IST LINUX? Linux ist ein Klon des Betriebssystems Unix, der von...

log4shell-example

Test dell'Exploit Log4Shell L'obiettivo di questo progetto è dimostrare la vulnerabilità di exploitation di log4j cve-2021-44228 in un ambiente spring-boot e mostrare come risolverla. Questo progetto contiene tre sottomoduli. Uno di questi contiene codice vulnerabile, gli altri due sono corretti...

CVE-2024-41312.

CVE-2024-41312. InstantCMS - संग्रहीत क्रॉस साइट स्क्रिप्टिंग XSS प्रभावित संस्करण: InstantCMS 2.16.3 पुनरुत्पादन के चरण: 1. https://demo.instantcms.io पर डेमो उपयोगकर्ता के रूप में लॉग इन करें। 2. https://demo.instantcms.io/photos/upload पर जाएं। 3. कैमरा मॉडल नाम मेटाडेटा फ़ील्ड में एम्बेडेड...