CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 - Social Warfare WordPress Plugin RCE This repository contains a working Python exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare plugin for WordPress version system"bash -...

cloudscraper

cloudscraper - Enhanced Edition Enhanced byZied Boughdir Latest Release: v3.0.0 🚀 - Major Upgrade 🆕 Major New Features in v3.0.0 🛡️ Automatic 403 Error Recovery - Intelligent session refresh when 403 errors occur after prolonged use 📊 Session Health Monitoring - Proactive session management with...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

selenium-wire

Selenium Wire 已不再维护。感谢您的支持和所有贡献。 Selenium Wire Selenium Wire 扩展了 Selenium 的 Python 绑定，让您可以访问浏览器发出的底层请求。您可以像使用 Selenium 一样编写代码，但还能获得额外的 API，用于检查请求和响应，并即时对其进行修改。 .. image:: https://github.com/wkeeling/selenium-wire/workflows/build/badge.svg :target: https://github.com/wkeeling/selenium-wire/actions...

cfn_nag

Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

CVE-2024-34223

Human Resource Management System Project in PHP and MySQL Free Source Code Submitter: Kha Do Vulnerability Insecure Permission Description Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Description : A cross-site scripting XSS vulnerability in the component “addnewparent” of School Fees Management System 1.0 allow attackers to execute arbitrary web...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

CVE-2024-40498

CVE-2024-40498 Affected Application online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Description The file register.php handles user registration. At line 117, the POST parameters "$address1" and $address2" are unsanitized, unlike the e-mail,...

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

CVE-2023-49973

CVE-2023-49973 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "email" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor ca...

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SITE parameter from installation or in the Settings. Attack Vectors: Scripting A vulnerability in the...

CVE-2024-34224

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

RPC-Triage

RPC-Triage Static vs dynamic, read this first. It is worth being clear about the line between dynamic and static analysis up front: this tool does its ranking purely through static analysis. It reads the compiled MIDL / NDR structures straight out of the binary and never executes anything. Static...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview Code-Projects...

CVE-2021-42668

cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in the Engineers online portal system. Technical description: An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "myclassmates.php" web page in order to...

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Privilege escalation vulnerability on MitraStar routers Device: Mitrastar GPT-2541GNAC-N1 Firmware: BRg3.5100VNZ0b33 not tested in other version Exploit: Mitrastar GPT-2541GNAC-N1 devices are provided with access through ssh int...