CVE-2025-0316-Exploit

CVE-2025-0316-Exploit CVE-2025-0316 حزمة استغلال 🚨 استغلال تجاوز المصادقة لإضافة ووردبريس WP Directorybox Manager 🔥 سكربت استغلال آلي لـ CVE-2025-0316 — تجاوز المصادقة عبر إجراء AJAX ضعيف. ⚠️ إشعار قانوني هذه الأداة مخصصة حصريًا لـ: البحث محاكاة الفريق الأحمر تقييم أمني مصرّح به استخدام هذه الأداة...

CVE-2023-29983

Exploit Title: Stored Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29983 Description: The vulnerability...

CVE-2024-31835

CVE-2024-31835 फ्लैटप्रेस CMS Flatpress v1.3 में क्रॉस साइट स्क्रिप्टिंग भेद्यता एक दूरस्थ हमलावर को फ़ाइल नाम पैरामीटर में क्राफ्टेड पेलोड के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। प्रभावित घटक: FlatPress CMS एडमिन पैनल फ़ाइल अपलोड फ़ील्ड निश्चित संस्करण: Flatpress v1.3 - FlatPre...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...

CVE-2024-27198-POC

CVE-2024-27198 – JetBrains TeamCity: PoC لتجاوز المصادقة وتنفيذ الأوامر عن بُعد RCE المؤلف: EynaExp النطاق: بحث / تحقق دفاعي / اختبار مصرح به فقط نظرة عامة يحتوي هذا المستودع على ماسح جماعي لإثبات المفهوم PoC يستهدف حالات JetBrains TeamCity المتأثرة بـ CVE-2024-27198 ، وهي ثغرة تجاوز مصادقة قد تؤ...

cve-2026-23550-poc

CVE-2026-23550 PoC أداة اختبار Bash صغيرة لثغرة CVE-2026-23550. ترسل طلبًا إلى نقطة نهاية تسجيل الدخول الخاصة بالموصل المعياري modular connector المتأثر في ووردبريس، وتتحقق مما إذا كان قد تم إصدار ملف تعريف ارتباط wordpressloggedin، وتحاول تأكيد الوصول إلى لوحة التحكم الإدارية. تحذير: استخدم هذه...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 - सोशल वारफेयर वर्डप्रेस प्लगइन RCE इस रिपॉजिटरी में CVE-2019-9978 के लिए एक कार्यशील पायथन एक्सप्लॉइट है, जो वर्डप्रेस के सोशल वारफेयर प्लगइन संस्करण sy...

cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735: ZTE ZXHN H168N Information Leak to Full Admin Compromise Technical case study and GitHub Pages-ready write-up for CVE-2021-21735 in the ZTE ZXHN H168N V3.5. This repository focuses on the firmware routing flaw behind the exposed wizard endpoints, the disclosure timeline, the scori...

CVE-2023-42793

Usage: save it as teamcity-admin-creation.nse and run: nmap -p 8111 --script teamcity-admin-creation --script-args url=https://target-url...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

Palo Alto Expedition - Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. id: CVE-2024-5910 info: name: Palo Alto Expedition - Admin Account Takeover author: johnk3r severity: critical...

CVE-2024-10924

CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2FA Bypass Overview This repository contains an exploit for CVE-2024-10924 , a vulnerability in the Really Simple SSL plugin for WordPress. It allows an attacker to bypass Two-Factor Authentication 2FA onboarding and gain unauthorized...

CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105126: Improper Privilege Management

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

PT-2026-104659

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

PT-2026-104653

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...

PT-2026-104621

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...