tgscope

tgscope Telegram OSINT, scraping and archival. A local web app that runs entirely on your machine and talks only to Telegram. npm install npm start Then open http://127.0.0.1:5173. The first run walks you through API credentials, a QR sign-in and loading your dialogs. Telegram is the only server ...

cve-2024-3552

Description The Plugin Web Directory Free WordPress prior to version 1.7.0 contains a SQL Injection vulnerability. The AJAX execution function is not properly filtered/sanitized, allowing an attacker to manipulate the SQL query or inject additional clauses UNION, time-based, error-based Context...

CVE-2026-20079

🚨 CVE-2026-20079 "Critical Cisco FMC Zero-Day" Critical Authentication Bypass Leading to Root RCE in Cisco Secure Firewall Management Center 📋 Overview CVE-2026-20079 is a critical vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software. An unauthenticated remot...

vert-x3__vertx-web_CVE-2018-12542_3-5-3-CR1

= Vert.x-Web image:https://vertx.ci.cloudbees.com/buildStatus/icon?job=vert.x3-web"Build Status",link="https://vertx.ci.cloudbees.com/view/vert.x-3/job/vert.x3-web/" image:https://img.shields.io/maven-central/v/io.vertx/vertx-web.svg"Maven Central"...

asf__cxf_CVE-2019-17573_3-2-11

Welcome to Apache CXF! Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of...

CVE-2021-35492

Exploit Information Exploit Title: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 Date: 2021-10-06 Exploit Author: N4nj0 Software Link: https://www.wowza.com/products/streaming-engine Version: 4.8.11+5 Tested on: Wowza Streaming Engine = 4.8.11+5 Vulnerability Advisory:...

Exploit for CVE-2026-13249

CVE-2026-13249 — Honeywell PD45 Unauthenticated File Upload R...

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...

CVE-2023-20198

Overview This repository contains a cybersecurity case study analysing CVE-2023-20198, a critical zero-day vulnerability in Cisco IOS XE Software. The project explores how the vulnerability can be exploited via the Web UI and proposes technical, procedural, and policy-based mitigation strategies...

CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 Vulnerability Details Title: WordPress Portfolleo plugin = 1.2 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in James Eggers Portfolleo portfolleo allows uploading a web shell...

cve-2022-1040

Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...

filekey

🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...

CVE-2023-0861-POC

NetModuleルーターにおけるコマンドインジェクション脆弱性（CVE-2023-0861）の分析と再現 NetModuleは、重要インフラや産業用制御システムで一般的に使用される産業用グレードのルーターの相手先ブランド製造業者（OEM）です。2023年2月24日、セキュリティ調査会社ONEKEYは、9機種のNetModuleルーターに影響を与える脆弱性を開示するセキュリティ勧告を発表しました。この脆弱性はWeb管理インターフェース内で特定され、認証されたユーザーが昇格した特権で任意のコマンドを実行することを可能にします。...

CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

CVE-2026-44402

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 存在无需认证的完全远程命令执行漏洞 内容 受影响厂商：https://voltronicpower.com/ 受影响产品：SNMP Web pro 1.1 SNMP Web Pro 1.1 的 upload.cgi 端点存在一个未经认证的远程代码执行漏洞。固件更新功能允许用户上传 tar 归档文件，随后该文件会在没有任何输入验证或安全检查的情况下被解压并安装。应用未能限制或清理归档内容，因此攻击者可以上传包含恶意 CGI...

cve-2022-22965

Minimal CVE-2022-22965 example At the time of writing, spring-web request params binding WebDataBinder, by default allows accessing object's getClass method. This is an internal jvm specific implementation detail imho shouldn't be exposed. As such, its features may change and be expanded with...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

CVE-2020-9047

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVision Web Service...

CVE-1999-0678

CVE-1999-0678: Detection & Remediation Project Author: Pham Huu Minh Date: December 2025 Project Overview This project demonstrates the complete lifecycle of a vulnerability assessment, specifically targeting the legacy Directory Traversal vulnerability CVE-1999-0678 on an Apache Web Server. The...

CVE-2023-36845-Juniper-Vulnerability

CVE-2023-36845 This script provides an automated Proof of Concept PoC for CVE-2023-36845, a vulnerability affecting Juniper Networks Junos OS on EX and SRX Series devices. It exploits the J-Web component, allowing remote modification of the PHPRC variable and potential code injection. Affected...