CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

CVE-2025-9074-PoC-Bash

CVE-2025-9074-PoC-Bash The original PoC is: https://github.com/j3r1ch0123/CVE-2025-9074. This is new PoC in bash since not all docker containers has python installed, and mostly this should be run from inside a container. Steps From inside the container use the following to find vulnerable docker...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit CVE-2025-0316 Exploit Toolkit 🚨 Auth Bypass Exploit for WordPress Plugin WP Directorybox Manager 🔥 Automated exploit script for CVE-2025-0316 — Auth Bypass via vulnerable AJAX action. ⚠️ Legal Notice This tool is intended strictly for: Research Red Team simulation Authorized...

santa

Santa Santa ist ein Autorisierungssystem für Binärdateien und Dateizugriffe unter macOS. Es besteht aus einer Systemerweiterung, die Ausführungen und Dateizugriffe überwacht und Entscheidungen auf der Grundlage der Inhalte einer lokalen Datenbank trifft, einem GUI-Agenten, der den Benutzer im Fal...

s3sec

s3sec Prueba los buckets de AWS S3 para acceso de lectura/escritura/eliminación Esta herramienta fue desarrollada para probar rápidamente una lista de buckets de S3 para acceso público de lectura, escritura y eliminación con fines de pruebas de penetración en programas de bug bounty. Screenshot...

CVE-2024-32258

Overview CVE ID : CVE-2024-32258 Type : Path Traversal Vendor : FCEUX Products : FCEUXNetPlay Version : 2.7.0 Fix : 48b48e7c13be1b949074f42660a33c7ef57135e1 Description FCEUX is a NES Emulator that can take us back to our childhood. It provides multiple interesting features, such as two players...

bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 Demo Project 🔐 Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- 📌 Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and its secure...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass Run exploit USE: python3 exploit.py ⣀⡠⢤⡀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⡴⠟⠃⠀⠀⠙⣄⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣠⠋⠀⠀⠀⠀⠀⠀⠘⣆⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠾⢛⠒⠀⠀⠀⠀⠀⠀⠀⢸⡆⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣿⣶⣄⡈⠓⢄⠠⡀⠀⠀⠀⣄⣷⠀⠀⠀⠀⠀⠀⠀...

secpub

Cisco Nexus OS NX-OS - Command "injection" / sanitization issues. Discovered by: Peter Adkins [email protected] Access: Local; authenticated access is required. Tracking and identifiers: CVE - CVE-2011-2569 OS' Affected: Cisco Nexus OS NX-OS Vendor involvement: Alerted - patches available /...

CVE-2026-36522

CVE-2026-36522 Unauthenticated NaN Injection via MAVLinkPARAMSET in ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 Improper Validation of Specified Type of Input CVSS 3.1| 9.1 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected| ArduPilot ArduPlane 4.0.1 confirmed Component|...

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

CVE-2021-40375

CVE-2021-40375 - Broken Access Control in OpenEyes 3.5.1 Description An improper access control vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. A low privileged user could load a patient's profile in their browser and access sensitive information without the...

CVE-2023-46449

CVE-2023-46449 Incorrect Access Control VIDEO POC LINK https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via...

CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentraladminlogin2faverify Function 🚨 CVE-2025-7955 | RingCentral Communications WordPress Exploit 📝 Vulnerability Overview CVE: CVE-2025-7955 Affected Plugin: RingCentral...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

elevationstation

Stazione di Elevazione Rubare e duplicare i token SYSTEM per divertimento e profitto! Duplichiamo le cose, creiamo copie gemelle, e poi ce ne andiamo in sella. Hai usato getsystem di Metasploit e PSEXEC di SysInternals per ottenere privilegi di sistema, vero? Bene, ecco una versione standalone...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2023-49980

CVE-2023-49980 Best Student Result Management System 1.0 - Directory Listing Description : Best Student Result Management System 1.0 is vulnerable to Broken Access Control. The Directory Listing vulnerability allows any remote attacker to view the application's sensitive files within the includes...

behave

¡Behave! Una extensión de navegador de monitoreo aún en desarrollo para páginas que se portan mal. NB : Este es el repositorio de código del proyecto, si buscas las extensiones empaquetadas: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...