EUVD-2026-104853

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

EUVD-2026-104852

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

CVE-2026-43846

CVE-2026-43846 involves a stack-based buffer overflow vulnerability located within a non-functional feature . An authenticated attacker could potentially leverage this flaw to achieve code execution . While the vulnerability is documented, the specific software product, affected versions, and rem...

CVE-2026-43846

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution...

CVE-2026-51119

CVE-2026-51119 - Privilege Escalation in Invixium IXM WEB v2.3.85.25 Overview A privilege escalation vulnerability exists in Invixium IXM WEB v2.3.85.25 due to missing authorization checks on the POST /SystemUsers/CreateAppUser endpoint. An authenticated low-privileged user can abuse this endpoin...

CVE-2024-23780

CVE-2024-23780 Exploit for Netbox This script exploits CVE-2024-23780, which allows remote code execution RCE on Netbox instances. Usage python netboxexploit.py --url --username --password Parameters --url: URL of the Netbox instance. --username: Username for authentication with the Netbox...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

CVE-2024-0399

CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection Exploit Title: WooCommerce Customers Manager 29.4 - Post-Authenticated SQL Injection Date: 2024-03-25 Exploit Author: Ivan Spiridonov - xbz0n Software Link:...

CVE-2017-7494

CVE-2017-7494 hello i,am Gihad from Libya 17 C information On Exploit ========================================================================================== This module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This module...

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

CVE-2026-113465

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in Stormshield’s web administration panel . An attacker can execute malicious scripts by crafting a URL containing a payload within a specific parameter and tricking an authenticated administrator into visiting it. The impact involves hi...

CVE-2026-113465 Possible DOM XSS in SNS Web Administration Portal

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: File Upload Vulnerability in Agent DVR Information Description In iSpyConnect.com Agent DVR 5.1.6.0, there is a lack of verification of file type for sound file uploads. This allows an authenticated user to upload any file type through the upload audio component simply by toggling...

CVE-2026-43835

A vulnerability exists in the firmware upgrade functionality that allows an authenticated attacker to upload a forged firmware upgrade file . This flaw could lead to the permanent compromise of the affected device. Specific details regarding the affected product, software version, root cause, and...

CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

EUVD-2026-104830

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...

CVE-2023-26039

CVE-2023-26039 Description ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl in /web/api/app/Controller/HostController.php. A...

CVE-2026-54998-exp

DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview CVE-2026-54998 is an Incorrect...

CVE-2026-113407

BA-Workflow , developed by YS-infoware , contains a SQL Injection vulnerability (CWE-89). Authenticated remote attackers can exploit this flaw to inject arbitrary SQL statements, potentially allowing them to read, modify, and delete database contents. No specific patch version or remediation step...