7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2016-10033

CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 and is able to get Remote Code Execution. Resources https://vulners.com/cve/CVE-2016-10033 Usage As it is written in Golang, you can build the exploit yourself, as long there is golang installed into your system with: cd CVE-2016-10033 go...

m4ngl3m3

m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...

CVE-2024-27348

CVE-2024-27348 For Ethical Usages only, Any harmful or malicious activities are not allowed. And it's your own responsability You Can Read the analysis for the vulnerability from here: https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Apache HugeGraph Server RCE Scanner...

CVE-2018-18778-Scanner

CVE-2018-18778-Scanner Scan vulnerable versions of minihttpd before 1.30. ACME minihttpd before 1.30 lets remote users read arbitrary files. Usage python3 CVE-2018-18778-Scanner.py...

CVE-2023-0099-exploit

CVE-2023-0099-exploit Exploit Title: simple urls 115 - Reflected XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: https://getlasso.co/ Software Link: https://wordpress.org/plugins/simple-urls/ Version: 115 Tested on: firefox,chrome CVE: CVE-2023-0099 CWE: CWE-79 Platform: MULTIPLE...

CVE-2019-9053-CMS46635-python3

CVE-2019-2019-9053--CMS46635 CMS Made Simple 2.2.10 - SQL Injection python3...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability Docker-based reproduction environment for CVE-2025-55752, a path traversal vulnerability in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in Apache Tomcat's RewriteValve caused by incorrect processing...

CVE-2024-53376

CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...

CVE-2023-22974

CVE-2023-22974 OpenEMR 7.0.0 Arbitrary File Read...

CVE-2026-99077

In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Message packets are locally delivered and quote a UDP packet, a FIB nexthop exception FNHE is only created if the kernel c...

cve-2026-75157-poc

CVE-2026-75157 PoC Authorized security research PoC for the Apache Airflow queued-events authorization flaw in versions before 3.3.2. Scope Run only against an Airflow instance you own or are explicitly authorized to test. The default runner refuses non-loopback targets. This repository contains ...

CVE-2018-0114

CVE-2018-0114 before 0.11.0 unathenticated remote attacker can re-sign using a key embeded in token. https://www.cvedetails.com/cve/CVE-2018-0114/...

CVE-2023-38831-winrar

CVE-2023-38831-winrar Quick exploit builder for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. I created this exploit builder mainly to learn python language, so don't expect to find clean and optimized code...

CVE-2022-0739

CVE-2022-0739 BookingPressWordPress Plugin SQLInjection BookingPress before 1.0.11...

Malware in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connectio...

CVE-2026-111997

ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in input reaching a function call that uses the Address6 constructor...

CVE-2026-111997

The ip-address library, in versions prior to 10.7.4 , is vulnerable to a Denial of Service (DoS) condition. A remote attacker can cause high CPU consumption and application unresponsiveness by providing specially crafted input containing excessive percent (%) characters . The flaw exists because ...

CVE-2026-111997

ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in input reaching a function call that uses the Address6 constructor...