CVE-2025-11170

CVE-2025-11170 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 🚀 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 📝 Description The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root Failed to change password : The current password is incorrectuid=0root gid=0root groups...

CVE-2025-54068

CVE-2025-54068 A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. This tool is a recoded version of the original project by Synacktiv : Livepyre — https://github.com/synacktiv/Livepyre The core concept and methodology are based o...

cve-2025-55182-poc

Basic Information CVE-2025-55182 is one of the most impactful Web framework vulnerabilities of 2025. React Server Components RSC are now the mainstream architecture for modern Next.js applications, and a large number of standard projects created with create-next-app are within the affected scope,...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

CVE-2019-0709

CVE-2019-0708 Exploit In Progress It hits the Vulnerable Function...

bof

BOF BOF Boiboite Opener Framework is a testing framework for field protocols implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and manipulate frames from supported protocols. The library currently provides discovery and extended testing...

ThrottleStop

CVE-2025-7771 – ThrottleStop.sys Privilege Escalation CVE-2025-7771 | CVSS 8.7 | Local Privilege Escalation Overview ThrottleStop.sys exposes unrestricted IOCTL interfaces allowing arbitrary physical memory access through MmMapIoSpace. This enables local privilege escalation by patching kernel...

kartlanpwn

Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt | ---|--- CVE| CVE-2024-45200 CVSS 3.1| Undetermined Nintendo.. claims it's a 4.3/10 Bounty Paid| $512 H1 Report| 2611669 Discovered|...

CVE-2026-112027

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

CVE-2026-112026

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 Code execution Proof of Concept Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys The buffer overflow vulnerability was found in the "/userfs/bin/tcapi" binary which is used as a wrapper for the "Diagnostics"...

CVE-2023-29489

CVE-2023-29489 The security vulnerability is recorded in the Common Vulnerabilities and Exposures CVE system. Specifically, this vulnerability is related to cPanel, a popular hosting management software. This flaw allows for cross-site scripting XSS attacks through specially crafted requests."...

BurpSuiteSharpenerEx

Burp Suite Sharpener This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly. Refer to the "Burp Suite Compatibility and Reporting Errors" section for detailed information on compatibility. / | | . \ | . | || '| . / .| ' |/ .| ' /|||||| |...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

gate0

gate0 A small, auditable, terminating, deterministic micro-policy engine. Why Gate0? I built Gate0 because I was tired of debugging RegEx-based policies in production. I wanted something that was boring, bounded, and impossible to crash. If you want a flexible, general-purpose policy engine, you...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...