ROOT-APP-NPM-GHSA-GCFJ-64VW-6MP9 GHSA-gcfj-64vw-6mp9 in axios - Patched by Root

Root has patched GHSA-gcfj-64vw-6mp9 in the axios package for Root:npm. Multiple fixed versions available...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Escalada de Privilegios por Asignación Masiva PoC Vulnerabilidad de escalada de privilegios en Camaleon CMS /updatedajax con passwordrole=admin inyectado en los parámetros de contraseña. 4. Verifica que el rol se haya actualizado a admin. Requisitos Python 3 Instalar...

ROOT-APP-NPM-AIKIDO-2026-553733 AIKIDO-2026-553733 in next - Patched by Root

Root has patched AIKIDO-2026-553733 in the next package for Root:npm. Multiple fixed versions available...

Seraphim

Seraphim Agentic AI security scanner that proves exploitabili...

ROOT-APP-MAVEN-CVE-2019-10086 CVE-2019-10086 in commons-beanutils:commons-beanutils - Patched by Root

Root has patched CVE-2019-10086 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-48734 CVE-2025-48734 in commons-beanutils:commons-beanutils - Patched by Root

Root has patched CVE-2025-48734 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21511 CVE-2024-21511 in mysql2 - Patched by Root

Root has patched CVE-2024-21511 in the mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21508 CVE-2024-21508 in mysql2 - Patched by Root

Root has patched CVE-2024-21508 in the mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-3F6P-5WW8-9RCR GHSA-3f6p-5ww8-9rcr in mysql2 - Patched by Root

Root has patched GHSA-3f6p-5ww8-9rcr in the mysql2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21512 CVE-2024-21512 in mysql2 - Patched by Root

Root has patched CVE-2024-21512 in the mysql2 package for Root:npm. Multiple fixed versions available...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

poc-CVE-2026-64638-

XSS2Shell — PoC del CVE-2026-64638 Cadena de explotación de XSS pre-autenticación → RCE en WordPress, basada en la investigación de pwn.ai publicada en ionsec.io. ⚠️ AVISO LEGAL : Solo para FINES EDUCATIVOS y PRUEBAS AUTORIZADAS. Úselo únicamente contra sistemas que le pertenezcan o para los que...

CVE-2026-4282-Scanner

CVE-2026-4282-Scanner A non-intrusive, version-based vulnerability scanner for CVE-2026-4282 , affecting Keycloak and Red Hat Build of Keycloak RHBK. ⚠️ Disclaimer: This tool is intended strictly for authorized security research, penetration testing, and defensive vulnerability management. Only ru...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center RCE autenticado mediante WinREST/PowerShell invokeCommand. Uso: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Variables de entorno: root@kitploit: WACBASE - override target base URL default below WACPASS - password, use...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder 未认证远程代码执行 针对 CVE-2026-5524 的大规模利用工具包，这是一个在 WordPress 插件 Divi Form Builder = 5.1.8 中存在的未认证任意文件上传漏洞，可导致远程代码执行。 字段| 值 ---|--- CVE| 2026-5524 CVSS| 9.8 严重 向量| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 受影响版本| Divi Form Builder = 5.1.8 修复版本| 5.1.9 类型| 未认证文件上传致远程代码执行 研究人员|...

ROOT-APP-NPM-GHSA-GV7W-RQVM-QJHR GHSA-gv7w-rqvm-qjhr in esbuild - Patched by Root

Root has patched GHSA-gv7w-rqvm-qjhr in the esbuild package for Root:npm. Multiple fixed versions available...

CVE-2026-89257

AVideo through 29.0 contains an insecure direct object reference IDOR vulnerability in objects/categoryDeleteAssets.json.php. The endpoint validates only the Category::canCreateCategory capability and a CSRF nonce before passing the attacker-supplied $REQUEST'id' to Category::deleteAssets, which...

CVE-2026-64638

CVE-2026-64638 XSS Reflejado en la Pantalla de Inicio de Sesión que Conduce a Ejecución de Código PHP — WordPress Core Software: WordPress Core ≤ 7.0.2 todas las versiones anteriores a 7.0.3 CVSS: 8.9 Alta CWE: CWE-79 — Neutralización incorrecta de la entrada durante la generación de la página we...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Explotación Masiva para Fortinet FortiOS SSL VPN Una herramienta para la explotación masiva de la vulnerabilidad CVE-2018-13379 path traversal en Fortinet FortiOS SSL VPN. Permite leer archivos de sesión y extraer inicios de sesión y contraseñas en texto claro. Características...

CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof of Concept for CVE-2026-29000 - A critical authentication bypass vulnerability in pac4j JWT implementation that allows attackers to forge admin tokens without a valid signature. ⚠️ DISCLAIMER This tool is provided for educational and...