dir-3040_dos

dir-3040 Denial of Service Dir-3060 might also be affected as they share many components from same firmware. Tested on latest firmware 1.20b03a hotfix ftp server user access page by default is configured for any user with write privileges to write directly to ram instead of restricting to usb...

Mass-CVE-2023-28121-kdoec

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User How to use This script using Python3. Install requirements pip install -r requirements.txt Reference https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072...

refresh

Refresh This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp...

CVE-2025-29018

CVE-2025-29018 - Internet Banking System 2.0.0 Stored XSS in pagesaddacctype.php Description A Stored Cross-Site Scripting XSS vulnerability exists in Code Astro Internet Banking System 2.0.0 due to unsanitized input in the name parameter in pagesaddacctype.php. Attackers can store malicious...

sshuttle

sshuttle: donde el proxy transparente se encuentra con la VPN y con ssh Hasta donde yo sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o router es Linux, FreeBSD, MacOS o Windows experimental. Tienes acceso a una red remota vía ssh. No necesariamente...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What is Gitea? Gitea is a lightweight, open-source Git hosting platform that allows organizations and developers to manage source code repositories, track issues, review changes, and collaborate on software projects. It provides functionalit...

CVE-2025-68860

WordPress Mobile Builder = 1.4.2 - Broken Authentication CVE-2025-68860 Description The WordPress Mobile Builder plugin version 1.4.2 and below has a Broken Authentication vulnerability that allows an attacker to generate a valid JWT token with the default secret "examplekey" and authenticate as...

CVE-2025-64446

🛡️ CVE-2025-64446 - FortiWeb Critical Authentication Bypass & Path Traversal Critical unauthenticated vulnerability allowing remote attackers to create administrator accounts on FortiWeb devices. 📌 Overview CVE-2025-64446 is a severe relative path traversal vulnerability in the FortiWeb Web...

CVE-2023-32315

CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author phith0n and K3ysTr0K3R Description Openfire is an XMPP server licensed under the Open Source...

CVE-2024-34832

CubeCart - Directory Traversal May Lead To RCE CVE-2024-34832 TL;DR In the admin panel, parameters such as g and node are used to construct the path to include .inc.php files and execute PHP code. A malicious user with the ability to upload .inc.php files anywhere on the server can exploit a path...

CVE-2024-22274

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the...

CVE-2025-50364_CSRF_ADD_CATEGORY-phpgurukul-CVE

Project Name & Repo URL: Maid Hiring Management System using PHP and MySQL Vulnerability Type: Client Side Request Forgery Affected Versions: v1.0 💣Vulnerability Description: A Cross-Site Request Forgery CSRF vulnerability exists in the admin panel of PHPGurukul Hiring Management System, allowing...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...

CVE-2025-31161_exploit

CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...

cve-2025-4615

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php needs to replace the original functions.php in the image, and mount it directly in docker-compose.yml poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132.0 Gecko/201001...

CVE-2023-28121-WordPress-Privilege-Escalation

🔐 CVE-2023-28121 — WordPress Privilege Escalation Practical exploitation of a critical vulnerability in WordPress using the WooCommerce Payments plugin. 📌 Summary CVE-2023-28121 allows creating administrator users without authentication via the REST API. Severity: Critical CVSS 9.8 Impact: Full...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2026-52782

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-52782 CVE-2026-52782 OpenProject 17.3.2 - OpenProject GmbH I am @abraxasnull. Loopback lab. The client is CVE-2026-52782-Abraxas-Labs.py. IDOR on managed folders. Storages::ProjectStorages::BaseContract...