CVE-2022-41352

CVE-2022-41352 PoC How does this detection method work? As stated on the advisories an issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0, the template looks at the following versions: - "8.8.15" - "9.0" How do I run this script? 1. Download Nuclei from here 2. Copy the template to...

codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1

Plexus-archiver The current master is now at https://github.com/codehaus-plexus/plexus-archiver Important Hint Based on a hint of snyk.io security team they have found a possible security issue. Furthermore they have offered an patch to prevent the possible security issue. This patch has been...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 and lower version is vulnerable for Open Redirection attack. Step to Reproduce 1. Login your account on https://mainnet.demo.btcpayserver.org/login 2. Then Click the link below...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...

CVE-2022-4174_CVE-2022-41742

CVE-2022-4174CVE-2022-41742 PoC for CVE-2022-4174CVE-2022-41742 to determine if Nginx 1.22.1 is vulnerable [email protected] This PoC allows determining if an Nginx server version 1.22.1 is vulnerable to certain known vulnerabilities, including: CVE-2022-41741 : Memory corruption in the...

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit for CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution The exploit is for educational purposes only and should not be used for malicious purposes...

CVE-2026-17543-PHP-Exposure-Validator

PHP CVE-2026-17543 Exposure Validator Safe network-side validator for checking potential exposure to PHP CVE-2026-17543. This project checks whether a remote web server exposes a PHP version affected by CVE-2026-17543 and can optionally perform non-destructive login-form probes using harmless...

CVE-2024-30956

CVE-2024-30956 cf https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM-based XSS HTML Injection vulnerability in TOWeb version 5 eg http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP navigate to the url, the JS code is executed PS: src contains a copy ...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

CVE-2024-27348

CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml services: web: image: vulhub/hugegraph:1.2.0 ports: -...

cargo-perm

Description A new vulnerability in cargo version 1.7.0 has been found as explained here. Step by Step First you have to make sure your cargo version is vulnerable cargo --version Supose I have a cargo project with the following src/main.rs file: use numbigint::BigInt; use std::str::FromStr; //...

CVE-2025-7775

CVE-2025-7775 Version detection PowerShell There's also a cool file hash based method: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py You can also potentially use the client binaries to enumerate the version not sure if you need auth... not looked at...

CVE-2025-55182

Next.js CVE-2025-55182 – Automated Scanner Python This repository contains a fully automated Python PoC scanner for CVE-2025-55182 , a security vulnerability affecting Next.js 16.0.6. The tool allows security researchers and bug bounty hunters to test multiple targets at scale by simply providing...

cve-2016-10033-45

To build the dockers: $ sudo docker build . -t ep4/5.2.17 change 5.2.17 to 18 and 20. to run the dockers: $ sudo docker run -p 7001:80 ep4/5.2.17 change to 7001/7002/7003 and 5.2.17/18/20 in the respective folders...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...

thymeleaf-check

thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 offline triage tool — zero dependencies, single jar, no network. Two CVSS 9.0 SSTI bypasses, with two fixed releases shipped within nine days. It first answers "which of these am I affected by," then answers the harder question: On my versi...

CVE-2024-6387fixshell

CVE-2024-6387fixshell Only affects 8.5p1 = OpenSSH 9.8p1 Install build dependencies sudo apt-get update sudo apt-get install -y build-essential zlib1g-dev libssl-dev Download specified version source code wget https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.8p1.tar.gz Extract and...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 is vulnerable to Stored Cross Site Scripting XSS via /clients/profile. poc: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

ingress-nginx-0.21-1.19.5

BUILD: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

CVE-2024-36840-Exploit

CVE-2024-36840: SQL Injection Vulnerability in Boelter Blue System Management Version 1.3 Exploit Details Exploit Title : SQL Injection Vulnerability in Boelter Blue System Management version 1.3 Original Google Dork : inurl:"Powered by Boelter Blue" didn't workedzero url in search Google Dork By...