CVE-2024-42327_Zabbix_SQLi

🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...

sploitego

Sploitego - Maltego's Local Partner in Crime 1.0 - Introduction Sploitego is a local pen-test transform package that uses the Canari Framework for local transform execution in Maltego. The framework was first introduced at DEFCON 20 and has since picked up steam. 2.0 - Installing Sploitego 2.1 -...

CVE-2024-7854

CVE-2024-7854 Woo Inquiry = 0.1 - Unauthenticated SQL Injection Description: The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the...

CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Creación Arbitraria de Archivos sin Autenticación Descripción: El plugin Debug Tool para WordPress es vulnerable a la creación arbitraria de archivos debido a una falta de verificación de capacidades en la función dbtpullimage y a la falta de validación del tipo ...

ConceptronicIPCam_MultipleVulnerabilities

Conceptronic IP摄像头 0.61.X Web固件的多个漏洞 在Conceptronic IP摄像头中发现了CSRF和拒绝服务漏洞。 CVE| 描述 ---|--- CVE-2018-6407| 未认证的远程拒绝服务漏洞 CVE-2018-6408| CSRF允许更改管理员用户凭据或创建新用户 0. 引言...

CVE

CVE Informes de CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 root@kitploit: -------------- CVE-2025-67586 Exploit PoC -------------- Título del Exploit: WordPress Plugin 5.2.0 - Control de Acceso Roto Enlace del software: https://wordpress.org/plugins/highlight-and-share/ Versión: Descripción...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS 反射型XSS v3.2.3 作者：Sergio 描述： Evolution v.3.2.3 安装过程中的管理员选项存在多个反射型跨站脚本（XSS）漏洞，允许本地攻击者通过向 cmsadmin、cmsadminemail、cmspassword 和 cmspasswordconfim 参数注入精心构造的负载来执行任意 Web 脚本。 攻击向量： 在数据库安装管理员选项过程中，对 cmsadmin、cmsadminemail、cmspassword 和 cmspasswordconfim 参数的消毒存在漏洞，允许注入 JavaScript 代码。 POC：...

stegseek

⚡ Stegseek Stegseek is a lightning fast steghide cracker that can be used to extract hidden data from files. It is built as a fork of the original steghide project and, as a result, it is thousands of times faster than other crackers and can run through the entirety of rockyou.txt in under 2...

linux-4.19.72_CVE-2020-10757

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2023-27216

CVE-2023-27216 - Router DLink Este documento es mi experiencia personal como novato en la reversión y explotación de firmware. Alcance Para la demostración, analizaremos y reproduciremos CVE-2023-27216. Número CVE: CVE-2023-27216 Descripción de la vulnerabilidad: Un problema encontrado en D-Link...

CVE-2023-40869

CVE-2023-40869 Vulnerabilidad de Cross Site Scripting en mooSocial Software v.3.1.6 y 3.1.7 permite a un atacante remoto ejecutar código arbitrario a través de un script manipulado en las funciones editmenu, copuon y groupcategorias XSS almacenado vía CSRF. Rutas Afectadas...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 1 de junio de 2021 CVE-2021-1675 es una vulnerabilidad crítica de ejecución remota de código y escalada local de privilegios conocida como "PrintNightmare". Se han publicado exploits de prueba de concepto Python, C++ par...

CVE-2021-41773

CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 for apache 2.4.49 verison is released. So in this case, i want to explain about this apache vulnerability. Playground So, I think you guys want to test this vulnerability in website. So i have a playground place for you guys. This is the...

CVE-2026-90527 quequnlong shiyi-blog Add Message API index.vue cross site scripting

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed...

CVE-2026-90527

quequnlong shiyi-blog (versions up to 1.2.1 ) contains a cross-site scripting (XSS) vulnerability in the Add Message API component, specifically in the file blog-admin/src/views/message/message/index.vue. Manipulating the body.content argument allows a remote attacker with no privileges to execut...

EUVD-2026-77029

A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross site scripting. The attack can be executed...

CVE-2023-22515

CVE-2023-22515 CVE-2023-22515 Confluence Broken Access Control Exploit Vulnerability Description Confluence Unauthorized Addition of Admin User USAGE Build root@kitploit: Source compilation go mod init CVE-2023-22515 go mod tidy go build -ldflags="-s -w" -trimpath -o CVE-2023-22515.exe...

CVE-2021-24884

CVE-2021-24884 XSS2RCE in Formidable 4.09.04 Formidable 4.09.04 allowed to inject certain HTML Tags like ,,, and . This could allow an unauthenticated, remote attacker to exploit a HTML-injection by injecting a malicous link. The HTML-injection may trick authenticated users to follow the link. If...

pingap v0.14.2

pingap Before the pingap version is stable, no pull requests will be accepted. If you have any questions, please create a new issue first. Overview Pingap is a high-performance reverse proxy powered by the Cloudflare Pingora . It simplifies operational management by enabling dynamic, zero-downtim...