Monitorizer

Monitorizer The Ultimate Subdomain Monitoring Framework Installation ❗ Disclaimer --- Admin users are able to execute code on the local server make sure to change the default password at otherwise use it at your own risk Using docker $ curl...

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder CSRF to Arbitrary File Upload 📌 CVE Details CVE ID: CVE-2025-23922 Published: 2025-01-16 Plugin Affected: WordPress iSpring Embedder plugin Versions Affected: CSRF File Upload Exploit body font-f...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

CVE-2026-109523

A SQL injection vulnerability exists in the AJAX Endpoint component of the girishsaraf Online-Appointment-Booking-System (affected up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in the functionality of the Admin/getclinic.php file, where manipulating the city/cid argu...

CVE-2026-53711

The MCP Context Forge MCP Admin UI is vulnerable to stored cross-site scripting (XSS) in versions 0.2.0 through 0.3.1 . The root cause is insufficient output encoding when the Global Prompts feature stores and subsequently renders prompt templates. An authenticated attacker can save markup contai...

CVE-2026-53711

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

CVE-2026-53709

Versions prior to 1.0.2 of MCP Context Forge are vulnerable to administrative token forgery due to a hard-coded JWT_SECRET_KEY shipped in mcpgateway/config.py and .env.example. The verify_jwt_token() function accepts HS256 tokens signed with this known key, and get_current_user() automatically cr...

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

CVE-2026-109522

The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the Admin CRUD Endpoint component. Specifically, an unknown function in the Admin/deleteclinic.php file is susceptible to exploitation via the manipulation of the cid/did arguments. This flaw allows fo...

CVE-2023-3460

CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

WHOREPRESS

Wordpress login checker Install npm install --global whorepress Usage make sure you have a list with format url:username:pass whorepress list.txt Arguments list Arguments| Description ---|--- --admin-only| check only for admin priviledge --debug| debug error output --output| Output file Author...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

CVE-2026-12655

A security issue in 1732E ArmorBlock® I/O allows an unauthenticated attacker to change the device's webserver password without valid credentials. This vulnerability could lead to admin account takeover or unauthorized modification of the device configuration. Exploitation details are not provided.

CVE-2026-26719

Description Summary A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. The payload is stored and later executed in users’ browsers, lead unauthorized actions. Affected Products...

CVE-2018-8090

CVE-2018-8090 DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro Installers Affected Products: Quick Heal Total Security - 17.00 Quick Heal Internet Security - 17.00 Quick Heal AntiVirus Pro - 17.00 Affected Installers: Quick Heal Total Security 64 bit 17.00 QHTS64.exe,...

SharpRelay

Usage The only requirement for this attack to work is to have a beacon with local administrator privileges or with the ability to load drivers. The attack using SharpRelay works as follows: Upload the signed WinDivert driver into any folder on the compromised host Run SharpRelay to modify the...

CVE-2026-109410

A vulnerability exists in macrozheng mall version 1.0.3 dcaa93b within the mall-admin/mall-portal component. The flaw is located in the OmsOrderServiceImpl.updateMoneyInfo function of the /order/update/moneyInfo file, where a logic error leads to an incorrect calculation (CWE-682). This vulnerabi...

CVE-2026-109410

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated...

CVE-2026-109963

Froxlor versions prior to 2.3.14 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the email template editor via admin_templates.php. The root cause is that the system fetches the mail body using mailbodyid without performing an adminid ownership check. This allows...

CVE-2026-109953 FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin

FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sending the cleartext password to the RDP server. A compromised or man-in-the-middle destination host can decode...