CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

PHP-CGI-Argument-Injection-Exploit

🎬 Этот видеоролик YouTube 1️⃣ Проверка цели Определите IP Metasploitable с Kali: ip a Например: Kali: 192.168.56.101 Metasploitable2: 192.168.56.102 Проверяем порт и сервис: nmap -p 80 192.168.56.102 Также можно проверить в браузере: http://192.168.56.102/ 2️⃣ Запуск Metasploit msfconsole 3️⃣ Выбор...

CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

CVE-2024-21533-PoC-ggit

CVE-2024-21533 Argument Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this argument...

CVE-2026-105096

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2024-4577

CVE-2024-4577 - PHP-CGI Argument Injection RCE | | ---|---|--- CVE| Description| CVSSv3 CVE-2024-4577| PHP-CGI Argument Injection Vulnerability| 9.8 | | "CVE-2024-4577 is a critical argument injection vulnerability in PHP that can be exploited to achieve remote code execution RCE. According to...

PT-2026-104653

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2026-105097: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105134: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

CVE-2026-105096: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105149: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

mediawiki-CVE-2026-100382

Lab 재현 - CVE-2026-100382 ExternalData OS 명령 주입 이 lab은 무엇인가 MediaWiki 1.43 공식 이미지, SQLite + ExternalData3.6.1 마지막 취약 버전, ../mediawiki-extensions-ExternalData에서 읽기 전용으로 마운트됨. 루프백 전용: 127.0.0.1:$HOSTPORT에 게시됨 기본값 8080. 익명 편집 + action=parse가 활성화됨 MediaWiki 기본값 - PoC는 로그인이 필요 없음. 실행 cd lab ./up.sh 설치,...

CVE-2019-14287-demo

CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...