cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...

CVE-2025-59528

Version francaise CVE-2025-59528 Proof of Concept Minimal PoC focused on technical validation of the vulnerability in an authorized environment. Prerequisites You must have a user account on the target Flowise dashboard. You must have a valid API key linked to that account. You must start a...

CVE-2025-8110-gogs-poc

CVE-2025-8110 — Gogs Arbitrary File Write PoC Proof-of-concept for an authenticated arbitrary file write in Gogs. By pushing a repository that contains a symbolic link pointing outside the repo and then updating that link's contents through the API, an authenticated user can overwrite files on th...

CVE-2025-32044

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Exposure Stack Trace Args Leak → Names, Emails, Password Hashes Overview CVE-2025-32044 is a high-severity CVSS 7.5 unauthenticated information disclosure vulnerability in Moodle LMS 4.5.0 through 4.5.2. The vulnerability lies in Moodle's...

fortigate-cve-2022-40684-tool

Description This tool allows security professionals to identify and validate exposure to CVE-2022-40684 in FortiGate devices by interacting with exposed CMDB API endpoints. It supports enumeration of administrative users, user groups, and selective configuration extraction for analysis in...

FOSKiller

███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║ ██╗██║███████╗███████╗███████╗██║ ██║...

CVE-2026-8181-Lab

CVE-2026-8181 — Burst Statistics Authentication Bypass Lab Local-only Docker lab for CVE-2026-8181 , an authentication bypass in the WordPress plugin Burst Statistics – Privacy-Friendly WordPress Analytics. This lab compares a vulnerable plugin version against the patched version and uses a...

CVE-2026-111958

The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated as the token's owning user, an administrator in the default configuration, across the entire REST API with no nonce,...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78 OS...

CVE-2026-111958 Royal MCP < 1.5.7 - Authentication Bypass via Preview Link Token

The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated as the token's owning user, an administrator in the default configuration, across the entire REST API with no nonce,...

CVE-2026-111958

The Royal MCP WordPress plugin (versions before 1.5.7 ) is vulnerable to an authentication bypass due to improper handling of preview-link tokens. The plugin fails to restrict a token to the specific preview for which it was originally issued; consequently, any party obtaining a valid token can b...

EUVD-2026-108015

The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated as the token's owning user, an administrator in the default configuration, across the entire REST API with no nonce,...

CVE-2026-44338-Lab

CVE-2026-44338 PraisonAI Authentication Bypass Lab Local Docker lab for CVE-2026-44338, an authentication bypass in PraisonAI's legacy Flask API server. This lab demonstrates the unauthenticated access condition on the legacy API routes. It intentionally uses a safe route-level reproduction inste...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Arbitrary File Write via Symlink Traversal Overview Gogs = 0.13.3 is vulnerable to arbitrary file write through the PutContents API /api/v1/repos/:owner/:repo/contents/:path. The API validates file paths for directory-traversal sequences ../ but does not resolve...

POC-CVE-2025-31931

Writeup Read it here: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

CVE-2026-27886-check

CVE-2026-27886 Vulnerability Assessment Tool Safely detect whether a Strapi instance is vulnerable to CVE-2026-27886 without performing the full account-takeover chain. See the full write-up on the Bishop Fox blog. Description CVE-2026-27886 is an unauthenticated parameter sanitization bypass in...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect Privilege Assignment / Privilege Escalation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-49060, an Incorrect Privilege Assignment vulnerability affecting the WordPress plugin Hipp...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

Wp2Shell

wp2shell Pre-Authentication Remote Code Execution in WordPress Core. CVE-2026-60137 SQL Injection in WPQuery chained with CVE-2026-63030 REST API Batch Route Confusion. For educational and authorised security research purposes only. Affected Versions WordPress 6.9.0 through 6.9.4 and 7.0.0 throug...