CVE-2022-24734

CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP in Configuration - Add New Setting. The user must have a rights to add or update setting. This is tested on MyBB 1.8.29. Sources: https://github.com/mybb/mybb/ https://vulners.com/cve/CVE-2022-24734...

CVE-2020-15906

CVE-2020-15906 Writeup of CVE-2020-15906. Special Thanks to Frederic MohrLastbreach for your Backend Support. Tiki Wiki Cms Groupware 16.x - 21.1 Authentication Bypass by Maximilian Barz I have found a new vulnerability in TikiWiki Cms Groupware 16.x - 21.1. It allows remote unauthenticated...

CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0 Stored XSS in pagesaddacctype.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 due to unsanitized input in the name parameter in pagesaddacctype.php. Attackers can store malicious...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action root@kitploit: python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / ...

CVE-2026-6433

CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS, JS & PHP · Unauthenticated SQL injection → RCE via eval Affected: FlipperCode Custom CSS, JS & PHP ≤ 2.0.7 · WordPress plugin surface via admin-ajax.php At a glance...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

CVE-2019-11539

CVE-2019-11539 원본 발견: Orange Tsai, Meh Chang 저자: Justin Wagner, Alyssa Herrera 감사 인사: Orange, Meh Chang, Rich Warren, Alyssa, Mimir 취약점 설명 Pulse Secure Pulse Connect Secure 버전 9.0RX 9.0R3.4 미만, 8.3RX 8.3R7.1 미만, 8.2RX 8.2R12.1 미만, 8.1RX 8.1R15.1 미만 및 Pulse Policy Secure 버전 9.0RX 9.0R3.2 미만, 5.4RX...

CVE-2026-66917

IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery JoomGallery ≤ 4.3.0 — Editor-Role User Hijacks Any Gallery Image and Stores XSS Payload, Enabling Admin Session Takeover SUMMARY UserimageController::save in JoomGallery checks checkACL'edit', ... instead of checkACL'edit.own'...

CVE-2026-45156-POC

Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...

EUVD-2026-83896

Temporal Server decided whether a Workflow completion callback was internal by reading a caller-supplied HTTP header. An authenticated caller holding only write permission in a single namespace could attach a completion callback whose URL host matched the configured callback address allowlist,...

CVE-2026-87858

Temporal Server is vulnerable in its Workflow completion callback delivery logic (both HSM and CHASM implementations). A caller with only write permission in a single namespace can attach a callback with a non-empty source header, causing the History service to re-target the request to the intern...

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 説明: CVE-2023-32315 は Openfire サーバーに影響を与える脆弱性であり、攻撃者が有効な認証情報なしで管理パネルのログインをバイパスできるようにします。 このエクスプロイトは管理者ユーザーを追加し、攻撃者が悪意のあるプラグインをアップロードしてウェブシェルを取得できるようにします。 ⚙️ 仕組み CVE-2023-32315 は Openfire の脆弱性で、初期設定ウィザードの JSP /setup/setup-s/... に、設定が完了した後でもアクセスできるようにします。...

AMSIDetection

著者: Aden Chung Wee Jing [email protected] 会社: Countercept @countercept ウェブサイト: https://countercept.com コンパイル/実行方法 プログラムはx64でコンパイルし、管理者権限で実行する必要があります。...

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

CVE-2021-22911-rust

CVE-2021-22911 A rust proof of concept for this CVE. Used as part of https://tryhackme.com/room/rocket, a CTF boot to root on the TryHackMe learning platform. To use, update the constants in main.rs and run, and it should work straight off. Requires that you have the admin email address and...

CVE-2026-8181-Lab

CVE-2026-8181 — Burst Statistics Authentication Bypass Lab Local-only Docker lab for CVE-2026-8181 , an authentication bypass in the WordPress plugin Burst Statistics – Privacy-Friendly WordPress Analytics. This lab compares a vulnerable plugin version against the patched version and uses a...

CVE-2020-25078

CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

CVE-2024-49328-exploit

CVE-2024-49328-exploit 🌟 Description: This script exploits a privilege escalation vulnerability in the WP REST API FNS Plugin for WordPress. The vulnerability affects all versions up to and including 1.0.0, allowing unauthenticated attackers to gain administrator privileges. ⚙️ Usage root@kitploit...

CVE-2019-9053-port-py3

CVE-2019-9053 エクスプロイト - Python 3 これは CVE-2019-9053 エクスプロイトの Python 3 移植版で、CMS Made Simple CMSMS バージョン 2.2.10 未満を対象としています。この脆弱性により、News モジュールインターフェースを通じた SQL インジェクションが可能になります。 出力例 TryHackMe Simple CTF Challenge でテスト済み。 説明 このエクスプロイトは、CMS Made Simple の News モジュールにおける SQL インジェクションの脆弱性を利用します。以下のことが可能で...