CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Unauthenticated Limited Remote Code Execution Description: The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time...

CVE-2023-6241-Pixel7_Adaptation

CVE-2023-6241 for Google Pixel 7 This repository will illustrate how to adapt the exploit published by securitylab in its GitHub repository working for Google Pixel 8 for a Google Pixel 7. Before starting the modification of the exploit, the assumption that the original exploit was also working f...

ike-scan

ike-scan IKEホスト（IPsec VPNサーバ）の発見とフィンガープリント取得 目次 ビルドとインストール 概要 使い方 実装の詳細 ホスト入力とメモリ要件 レート制限 クッキー生成とリモートホスト識別 IKEパケットの詳細 バックオフフィンガープリント プログラムの出力 例 対応プラットフォーム 参考資料とRFC 連絡先 ビルドとインストール ike-scanは標準のGNU autoconfおよびautomakeツールを使用しているため、インストールは通常の手順となります。 git clone https://github.com/royhills/ike-scan.git...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

EUVD-2026-77457

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147 Apache Syncope: Groovy Sandbox escape for empty CommandArgs

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147 Apache Syncope: Groovy Sandbox escape for empty CommandArgs

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in their CommandArgs static implementation, bypassing the Groovy security...

CVE-2026-77147

CVE-2026-77147 is a code injection vulnerability in Apache Syncope 's Groovy security sandbox. An administrator with sufficient entitlements for Implementations can create a malicious Groovy Command class containing untrusted code in the CommandArgs static implementation , bypassing the sandbox —...

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrar...

poc-cve-2016-10555

Change the algorithm RS256asymmetric to HS256symmetric - POC CVE-2016-10555 The algorithm HS256 uses the secret key to sign and verify each message. The algorithm RS256 uses the private key to sign the message and uses the public key for authentication. If you change the algorithm from RS256 to...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

EUVD-2026-77450

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in core-upgrade backup handling. The CoreUpgradeController and BackupService concatenate a user-supplied backup_file/filename value directly onto the backup directory path without normalisation or path-containment c...

CVE-2024-58383

Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...

EUVD-2024-55764

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...