Joomla! Component Highslide 1.5 - Local File Inclusion

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1314 info: name: Joomla! Component Highslide 1.5 - Local File Inclusion...

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

CVE-2022-1388-EXP

CVE-2022-1388-EXP This is CVE-2022-1388-EXP Author:Caps@BUGFOR Github:https://github.com/bytecaps Remaker:LinJacck Github:https://github.com/LinJacck Feature Display Verification mode: python CVE20221388.py -v -u targeturl Attack mode: python CVE20221388.py -a -u targeturl -c command Batch...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Overview Critical pre-authentication RCE in BeyondTrust Remote Support and Privileged Remote Access. Unauthenticated remote attacker can execute OS commands. Field| Value ---|--- CVE| CVE-2026-1731 Severity| CRITICAL Product| BeyondTru...

CyberSecurity-Pentest-Lab

CyberSecurity Pentest Lab Personal penetration testing lab notes — hands-on exploitation, post-exploitation, and remediation write-ups against intentionally vulnerable machines Metasploitable 2, DockerLabs, done in isolated local environments as part of ongoing cybersecurity training...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Authenticated Author+ Stored Cross-Site Scripting Description The Easy Media Replace plugin is vulnerable to a Stored Cross-Site Scripting XSS via the media attachment title. When an Author renames a media file using an XSS payload and an Admin or Edito...

Discord-Rat

For educational purposes only!! Discord Rat - Setup Guide Author : @deadconvicess | Packaged By: deadconvicess License : MIT WHAT YOU NEED 1. Python 3.11+ Installed 2. A Discord Bot Token https://discord.com/developers/applications 3. A Discord Webhook URL Discord Channel Integrations Webhooks 4...

CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

create_ap

NOT MAINTAINED This project is no longer maintained. Forks and continuation of this project linux-wifi-hotspot - Fork that is focused on providing GUI and improvements. linux-router - Fork that is focused on providing new features and improvements which are not limited to WiFi. Some interesting...

CVE-2020-11539

CVE-2020-11539: Improper Access Control in Tata Sonata Smartband Information Description: It has been identified that the smart band has no pairing mode 0 BLE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't hav...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

PT-2026-116353

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

WordPress Passster 4.3.18 Broken Access Control

WordPress Passster versions 4.3.18 and earlier contain a broken access control vulnerability that permits unauthenticated access to pages or actions that should be restricted...

Apache Camel 4.22.0 SMB Consumer Path Traversal

Apache Camel versions from 4.2.0 before 4.18.5 and from 4.19.0 before 4.22.1 contain a path traversal vulnerability in the SMB consumer that could allow a crafted share listing entry to access, delete, or rename files outside the polled directory...

Vedo Suite 1.2.5 Insecure Direct Object Reference

Vedo Suite version 1.2.5 contains an insecure direct object reference vulnerability that allows an authenticated low-privileged user to access other users' private data by changing user-controlled API identifiers...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1792239979)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1792239979 advisory. - In the Linux kernel, the following vulnerability has been resolved: kyber: fix out of bounds access when preempted...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

CVE-2024-10220-githooks

CVE-2024-10220 Test ref https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

CVE-2026-67223

A flaw was found in rabbitmq-server. When the service uses the Lightweight Directory Access Protocol LDAP authentication plugin with a configured user Distinguished Name DN pattern, it fails to properly escape special characters in the username. A remote attacker can exploit this vulnerability by...