CVE-2023-29983

Exploit Title: Stored Cross Site Scripting Google Dork: Дата: 27.04.2023 Автор эксплойта: Lucas Noki 0xPrototype Домашняя страница вендора: https://github.com/vogtmh Ссылка на ПО: https://github.com/vogtmh/cmaps Версия: 8.0 Протестировано на: Mac, Windows, Linux CVE : CVE-2023-29983 Описание:...

CVE-2024-31835

CVE-2024-31835 Уязвимость межсайтового скриптинга Cross Site Scripting в Flatpress CMS v1.3 позволяет удаленному злоумышленнику выполнить произвольный код с помощью специально сформированного имени файла, содержащего вредоносную нагрузку. Затронутый компонент: Поле загрузки файлов панели...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Обход аутентификации Burst Statistics -brightgreen.svg?style=for-the-badge !CAUTION КРИТИЧЕСКОЕ ПРЕДУПРЕЖДЕНИЕ: Эта уязвимость позволяет неаутентифицированному удалённому злоумышленнику обойти аутентификацию и получить полные привилегии администратора на целевом сайте WordPress,...

CVE-2024-27198-POC

CVE-2024-27198 – Обход аутентификации JetBrains TeamCity и RCE PoC Автор: EynaExp Область применения: Исследование / Защитная валидация / Только авторизованное тестирование Обзор Этот репозиторий содержит массовый сканер proof-of-concept , нацеленный на экземпляры JetBrains TeamCity , затронутые...

cve-2026-23550-poc

CVE-2026-23550 PoC CVE-2026-23550용 소형 Bash 테스터입니다. 영향을 받는 WordPress 모듈식 커넥터 로그인 엔드포인트에 요청을 보내고 wordpressloggedin 쿠키가 발급되는지 확인하며 관리자 대시보드 접근을 확인하려고 시도합니다. 경고: 이 도구는 소유한 시스템이나 명시적 테스트 권한이 있는 시스템에만 사용하십시오. 승인되지 않은 보안 테스트는 불법이거나 시스템을 방해할 수 있습니다. 요구 사항 Bash 4+ curl grep mktemp 사용법 스크립트를 실행 가능하게 만듭니다:...

Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations

CVE-2021-46075 Exploit Title: Vehicle Service Management System - 'Multiple' Privilege Escalation Leads to CRUD Operations Exploit Author: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HIGH References:...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 - Удаленное выполнение кода в плагине Social Warfare для WordPress Этот репозиторий содержит рабочий эксплойт на Python для CVE-2019-9978 — уязвимости удаленного выполнения кода в плагине Social Warfare для WordPress версии = 3.5.2. Описание Параметр swpdebug в файле admin-post.php...

cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735: ZTE ZXHN H168N 정보 유출에서 전체 관리자 권한 탈취까지 CVE-2021-21735 ZTE ZXHN H168N V3.5에 대한 기술 사례 연구 및 GitHub Pages 호환 글입니다. 이 저장소는 노출된 마법사 엔드포인트 뒤에 있는 펌웨어 라우팅 결함, 공개 타임라인, 공급업체 권고와 NVD 간의 점수 차이, 그리고 정보 유출에서 전체 관리자 권한 탈취까지의 실제 경로에 중점을 둡니다. 이 저장소의 내용 index.html: 메인 기사 페이지, GitHub Pages용으로 설계됨...

CVE-2023-42793

사용법: teamcity-admin-creation.nse로 저장하고 실행하세요: nmap -p 8111 --script teamcity-admin-creation --script-args url=https://target-url...

Palo Alto Expedition - Admin Account Takeover

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. id: CVE-2024-5910 info: name: Palo Alto Expedition - Admin Account Takeover author: johnk3r severity: critical...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

CVE-2024-10924

CVE-2024-10924 Эксплойт - Обход 2FA плагина Really Simple SSL для WordPress Обзор Этот репозиторий содержит эксплойт для CVE-2024-10924 , уязвимости в плагине Really Simple SSL для WordPress. Он позволяет злоумышленнику обойти двухфакторную аутентификацию 2FA и получить несанкционированный доступ...

PT-2026-104657

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument order...

PT-2026-104621

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

PT-2026-104653

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

PT-2026-104606

Name of the Vulnerable Software and Affected Versions Simple Shopping Cart WordPress plugin versions prior to 5.2.6 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to escape certain settings field values before they are displayed on the admin settings page. This allows...

CVE-2026-105126: Improper Privilege Management

LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.loginas permissions to take over accounts and...

PT-2026-104659

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...