CVE-2025-50363_BXSS_CVE

Project Name & Repo URL: Maid Hiring Management System using PHP and MySQL Vulnerability Type: Privilege Escalation via Blind XSS Affected Versions:v1.0 💣Vulnerability Description: A Blind Cross-Site Scripting XSS vulnerability was discovered in the Maid Hiring Management System, which allows a...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2020-2733

CVE-2020-2733 - JD Edwards EnterpriseOne Tools admin password not adequately protected Pic 1: Decrypt the string Pic 2: Decrypt by giving the URL CVE-2020-2733 Application: JD Edwards EnterpriseOne Tools Versions Affected: JD Edwards EnterpriseOne Tools 9.2 Vendor URL: https://oracle.com/ Bug:...

PrivExchange

PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...

CVE-2022-42176

PCSecure V5.0.8.xw - Use of Hard-coded Credentials in configuration files leads to admin panel access Summary Vendor: PCTechSoft SAS Product: PCSecure Affected versions: 5.0.8.xw CodeName: PapiQuieroPollo00 Vulnerability Type: Use of Hard-coded Credentials CWE-798 CVSSv3.1 Vector:...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

CVE-2021-42562

CVE-2021-42562: Improper Access Control in MITRE Caldera Caldera versions =2.8.1 does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components which should only be accessible by admin users. Vendor Disclosure: The...

Invoke-WCMDump

Invoke-WCMDump PowerShell script to dump Windows credentials from the Credential Manager Invoke-WCMDump enumerates Windows credentials in the Credential Manager and then extracts available information about each one. Passwords are retrieved for "Generic" type credentials, but can not be retrived ...

Monitorizer

Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker $ curl...

CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Router WF2409E Command Injection PoC Vulnerability Description: The ping and traceroute functions of the NETIS SYSTEMS Router WF2409E version V3.6.42541 are susceptible to command injection attacks. Malicious input can be crafted in the parameters of the...

CVE-2026-93659-writeup

CVE-2026-93659: Stored XSS in Concrete CMS Community Store Leads to Admin Dashboard Takeover Summary | ---|--- CVE| CVE-2026-93659 Component| concretecms-community-store/communitystore Type| Stored Cross-Site Scripting CWE-79 Severity| CVSS v4.0 9.3 Critical / v3.1 8.7 High Affected| All versions...

CVE-2018-15365

Reflected XSS in Deep Discovery Inspector 3.8 I've found a reflected XSS vulnerability in the management web interface of Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 Vulnerable script path is /php/detectiondetailfilter.php. This script is accessible only by an authenticated user,...

url-tracker

URL Tracker v0.5.0 URL Tracker is a robust and scalable web application designed to monitor and track URLs, log changes, and provide detailed insights into the status and behavior of various web resources. Built on top of Sails.js, this application is perfect for tracking URLs for uptime, content...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 The attacker sends a specially crafted request to the wpajaxnoprivwcfmajaxcontroller AJAX action to modify the membership registration form and set the registration role to that of an administrator. Then, the plugin processes the request and modifies the membership registration...

CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Shortcode Addons = 3.2.5 – Authenticated Admin+ Arbitrary File Upload CVE ID: CVE-2024-31114 CVSS Score: 9.1 Critical 🛠️ Vulnerability Description The Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor Extension...

CVE-2023-31851

CVE-2023-31851 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/status has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

CVE-2021-22911

CVE-2021-22911 If you have already registered a user this will only reset the admin password, and not both. Making the exploit run much faster. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2021-37580

CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: For...

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - Authenticated RCE via Plugin Upload CVE-2025-50286 Grav CMS v1.7.48 with Admin Plugin v1.10.48 is vulnerable to Remote Code Execution RCE via the "Direct Install" plugin upload feature, allowing authenticated administrators to execute arbitrary PHP code ...