2626837 matches found
HikvisionExploiter_fixed
HikvisionExploiter Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments. ⚠️ Legal and Ethical Warning This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without...
HTTPoxyScan
HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...
CVE-2026-55584
CVE-2026-55584 - phpSysInfo IP Allowlist Bypass CWE-290, CVSS 7.5 High, phpSysInfo = 3.4.5 Refs: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED resolves the client IP from the attacker-controlled X-Forwarded-For then Client-IP headers before falling back to REMOTEADDR. There is no trusted-proxy concept,...
CVE-2021-3130
CVE-2021-3130 Suggested description Within the Open-AudIT up to 4.0.2 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the...
CVE-2026-82722
creationtimestamp| type| source ---|---|--- 2026-08-31 04:51:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cotlqs2wam3bw...
CVE-2026-8181
CVE-2026-8181 Proof of Concept Research • Validation • Security Testing "roses a red, violet are blue, i think i just shat my pant thinking about you. rizz" CVE Overview Field| Value ---|--- CVE ID| CVE-2026-8181 Type| Authentication Bypass Impact| Privilege Escalation / Full Site Takeover Attack...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...
CVE-2024-38828
CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...
Mahoraga-Webapp-Defender
Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...
CVE-2026-37073
CVE-2026-37073 Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...
CVE-2026-75757
creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iptfwxftjrpmg...
CVE-2026-66324
creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...
CVE-2026-66323
creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...
CVE-2026-62904
creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...
CVE-2026-58616
creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...
shfz
shfz A scenario-based web application fuzzng tool that supports fuzz generation by genetic algorithm. Features Easy to customize fuzzing test by scripting fuzzing scenario in JavaScript / TypeScript Third-party packages can be used in fuzzing scenario script Genetic algorithm fuzz generation...
CVE-2024-10355
Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...
CVE-2026-48908-SP-Page-Builder-Joomla
CVE-2026-48908: SP Page Builder Joomla Unauthenticated RCE Proof of Concept exploit for CVE-2026-48908, an unauthenticated Remote Code Execution vulnerability in Joomla SP Page Builder component. Vulnerability Overview CVE-2026-48908 is a critical security vulnerability that allows unauthenticate...
CVE-2025-29927
CVE-2025-29927: The Next.js Middleware Nightmare This repository is provided strictly for educational purposes only. I did not discover this vulnerability - this is a demonstration and explanation of a publicly disclosed security issue. Using this knowledge to exploit vulnerable systems without...