EUVD-2026-86488

A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This affects an unknown function of the file admin/fun/getStudent.php. This manipulation of the argument sid causes authorization bypass. The attack is possible to be carried out...

CVE-2026-97646

A vulnerability exists in the ningzichun student-management-system (up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) within the admin/fun/getStudent.php file. The root cause is an authorization bypass triggered by the manipulation of the sid argument. This flaw can be exploited remotely . ...

EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-088)

The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS shell environment utilities fail to safely canonicalize paths and can follow symbolic links from a writable user directory to a privileg...

CVE-2026-63216: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

CVE-2026-63205: Authorization Bypass Through User-Controlled Key

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies th...

CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This repository hosts an automated Proof-of-Concept PoC exploit for CVE-2025-8550 , a reflected Cross‑Site Scripting XSS vulnerability in atjiu pybbs ≤ v6.0.0. It targets the /admin/topic/list endpoint’s username parameter, which lacks proper...

CVE-2021-46398

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU En este repositorio encontrarás una prueba de concepto de la explotación de la falla CVE-2021-46398 a través de un docker compose, así como un análisis de los impactos de esta falla en los sistemas de información. Exploit Title: FileBrowser 2.17.2 -...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability Exploit Author: ugurkarakoc Vendor Homepage https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Overview...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-10307

Exploit: Arbitrary File Deletion via Backuply tarfile path traversal Browser Console PoC authenticated admin async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials: 'same-origin'...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Escalada de privilegios sin autenticar 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Escalada de privilegios sin autenticar 📌 Descripción general Este repositorio contiene una herramienta de prueba de concepto en Python para CVE-2025-39459 , que afecta al tema de...

CVE-2025-6934-PoC

🔓 CVE-2025-6934 Exploit Tool Unauthenticated Administrator Account Creation in WordPress Plugin Opal Estate Pro Created and developed fully by mejbankadir SMH tech and Mejban HackSheild Under NexoAmicus 📋 Description CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugi...

CVE-2017-12542-Exploit

Bypass de autenticación de HP iLO CVE-2017-12542 Este repositorio contiene un exploit de prueba de concepto para CVE-2017-12542 , una vulnerabilidad de bypass de autenticación que afecta a ciertas versiones del firmware de HP Integrated Lights-Out iLO. La vulnerabilidad permite acceso no...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Unauthenticated Arbitrary Password Reset CVE-2025-15030 User Profile Builder — Unauthenticated Password Reset → Admin Takeover + Shell Upload / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/...

easyda

EasyDA - Script de acceso sencillo a dominios Windows Script de acceso sencillo a dominios Windows Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda Publicado bajo...

CVE-2025-40554

CVE-2025-40554 Suite de Explotación Una herramienta integral de pruebas de seguridad para detectar y explotar la vulnerabilidad de omisión de autenticación CVE-2025-40554 / CVE-2025-40536 en SolarWinds Web Help Desk. ⚠️ Aviso Legal SOLO CON FINES EDUCATIVOS Y DE PRUEBAS DE SEGURIDAD AUTORIZADAS...

SecureConnect-Auth-Bypass

ConnectWise SecureConnect Authentication Bypass Vulnerability An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability. Blog Post More details here: https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ Usage Running...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/ ◈ Vulnerability Field| Detail ---|--- CVE ID| CVE-2025-13342 Score| 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Affected| Frontend Admin by DynamiApps ≤ 3.28.20 Auth| None —...

CVE-2026-24291

🔓 Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows 🧠 Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...