CVE-2026-100871: Improper Authentication

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2025-34157

XSS almacenado en el flujo de eliminación de Coolify CVE-2025-34157 Afecta: Coolify ≤ v4.0.0-beta.420.6 Corregido en: v4.0.0-beta.420.7 Severidad: Crítica 9.4 Vector CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Validación de...

westone-CVE-2021-37580-scanner

westone-CVE-2021-37580-scanner Apache Shenyu is an extensible, high-performance and responsive API gateway solution applied to all micro service scenarios. An authentication bypass vulnerability exists in Apache Shenyu admin. The improper use of JWT in Shenyu admin bootstrap allows an attacker to...

CVE-2023-24249-Exploit

Script de explotación CVE-2023-24249 Descripción Este repositorio contiene un script de explotación para CVE-2023-24249, una vulnerabilidad crítica encontrada en laravel-admin versión 1.8.19. Esta vulnerabilidad permite la carga arbitraria de archivos, lo que permite a los atacantes ejecutar códi...

CVE-2026-mikrotik-poc

Colección de PoC para MikroTik RouterOS Este repositorio contiene scripts de prueba de concepto PoC para varios problemas de seguridad de MikroTik RouterOS investigados y documentados en 2026. Los materiales están destinados únicamente a investigación de seguridad autorizada, validación en...

CVE-2026-60206

CVE-2026-60206 – PoC de omisión de autenticación SAML en Oracle WebLogic Server Este repositorio proporciona un exploit de prueba de concepto para CVE‑2026‑60206 , una vulnerabilidad crítica de omisión de autenticación en la implementación SAML de Oracle WebLogic Server. La falla permite que un...

CVE-2026-72898

CVE-2026-72898 PoC : Inyección SQL no autenticada en Metabase Inyección SQL previa a la autenticación en Metabase que conduce a la toma de control del administrador Prueba de concepto para CVE-2026-72898, una inyección SQL crítica no autenticada en el endpoint de restablecimiento de contraseña de...

CVE-2022-47872

CVE-2022-47872 maccms10 admin+ ssrf attacks Overview Manufacturer's website information：https://maccms.pro Source code download address ： https://github.com/maccmspro/maccms10.git Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/22 Enter the...

CVE-2025-50363_BXSS_CVE

Project Name & Repo URL: Maid Hiring Management System using PHP and MySQL Vulnerability Type: Privilege Escalation via Blind XSS Affected Versions:v1.0 💣Vulnerability Description: A Blind Cross-Site Scripting XSS vulnerability was discovered in the Maid Hiring Management System, which allows a...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...

CVE-2021-42562

CVE-2021-42562: MITRE Caldera 中的不当访问控制 Caldera（版本 = 2.8.1）未能正确隔离用户权限，导致非管理员用户能够访问、读取和修改本应仅供管理员访问的配置或其他组件。 供应商披露： 此漏洞的供应商披露可在此处找到。 要求： 此漏洞需要： 有效的非管理员用户凭据 概念验证： 更多详细信息和利用过程可在此 PDF 中找到。 其他资源： 此漏洞允许非管理员用户在 MITRE Caldera 中利用漏洞 CVE-2021-42559：在 MITRE Caldera 中通过配置进行命令注入 以实现远程代码执行。...

CVE-2026-93659-writeup

CVE-2026-93659: XSS Almacenado en Concrete CMS Community Store Conduce a la Toma de Control del Panel de Administración Resumen | ---|--- CVE| CVE-2026-93659 Componente| concretecms-community-store/communitystore Tipo| Cross-Site Scripting Almacenado CWE-79 Severidad| CVSS v4.0 9.3 Crítica / v3.1...

CVE-2018-15365

Reflected XSS in Deep Discovery Inspector 3.8 我在 Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 的管理Web界面中发现了一个反射型XSS漏洞。易受攻击的脚本路径是 /php/detectiondetailfilter.php。该脚本仅可供经过身份验证的用户访问，但考虑到下面的攻击场景，这并不会降低漏洞的严重性。 以下POST请求负载会触发JavaScript代码执行：...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 The attacker sends a specially crafted request to the wpajaxnoprivwcfmajaxcontroller AJAX action to modify the membership registration form and set the registration role to that of an administrator. Then, the plugin processes the request and modifies the membership registration...

CVE-2024-31114

CVE-2024-31114 - Exploit RCE de Shortcode Addons de WordPress Shortcode Addons = 3.2.5 – Subida arbitraria de archivos autenticada Admin+ CVE ID: CVE-2024-31114 Puntuación CVSS: 9.1 Crítica 🛠️ Descripción de la vulnerabilidad El complemento Shortcode Addons – con Visual Composer, Divi, Beaver...

CVE-2023-31851

CVE-2023-31851 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/status has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

CVE-2021-22911

CVE-2021-22911 如果你已经注册了一个用户，这将只重置管理员密码，而不会同时重置两者。这使得漏洞利用运行得更快。 python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2018-0114-Go

CVE-2018-0114 Prueba de concepto Referencia: CVE-2018-0114 Nota: Solo con fines educativos. Para generar un JWT con el claim "admin", ejecuta el siguiente comando en el directorio del proyecto: go run . --claim=admin /\ \ /\ /\ \ /\ \ /'\ /'\ /' \ /' \ /'\ /' \ /' \ /\ \ \ \ \ /\ \ \ \ \ \ \ ...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...