CVE-2023-48084-Revised

CVE-2023-48084 — updated PoC Repository: MettHK/CVE-2023-48084-Revised Updated version of Hamibubu/CVE-2023-48084 with multithreading, binary-search extraction, and CLI flags for database / table / column selection. Not the original repository. This is a derivative/improved PoC. Credit for the...

python-log4rce

Python Log4RCE An all-in-one pure Python3 PoC for CVE-2021-44228. Sample python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote target is http://127.0.0.1:1337/LinuxExploit.class...

CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...

GitLabSniper

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated arbitrary file read detect · public project enum · loot · interactive shell · subfinder/httpx pipeline Author: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Site: ynsmroztas.github.io Mail: [email protected]...

CVE-2024-36058

CVE-2024-36058 - Koha Library Software CVE ID: CVE-2024-36058 Product: Koha Library Software Vulnerability Type: Time-Based Blind SQL Injection CWE-89 CVSS Score: 9.8 Critical Affected Versions: Below 23.05.10 Credits: Karolis Narvilas Description Koha is an open-source integrated library system....

CVE-2024-36057

CVE-2024-36057 - Koha Library Software CVE ID: CVE-2024-36057 Product: Koha Library Software Vulnerability Type: OS Command Injection CWE-78 CVSS Score: 9.8 Critical Affected Versions: Below 23.05.10 Credits: Karolis Narvilas Description Koha is an open-source integrated library system. A command...

CVE-2024-23897

CVE-2024-23897 — HTTPS + CSRF-crumb aware PoC cve-2024-23897-crumb.py — unauthenticated arbitrary file read against Jenkins file --http --port N python3 cve-2024-23897-crumb.py jenkins.example.com python3 cve-2024-23897-crumb.py jenkins.example.com /etc/shells python3 cve-2024-23897-crumb.py...

CVE-2022-46169

CVE-2022-46169 — Cacti 1.2.22 Unauthenticated Command Injection Field| Details ---|--- Product| Cacti Affected version| 1.2.22 Vulnerability| Unauthenticated OS command injection CVE| CVE-2022-46169 CWE| CWE-77 — Command Injection Severity| Critical CVSS v3.1| 9.8 Attack vector| Network...

WP2Shell

WP2Shell - WordPress Pre-Auth RCE Exploit CVE-2026-63030 + CVE-2026-60137 Version: 4.0.0 Author: G0D150NE 📌 Overview WP2Shell is a full-chain exploit tool for WordPress pre-authentication remote code execution. It combines two critical vulnerabilities: CVE-2026-63030 - SQL Injection in REST API...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

goddi

ARCHIVE NOTE Project is no longer actively maintained. goddi - Go dump domain info Based on work from Scott Sutherland @nullbind, Antti Rantasaari, Eric Gruber @egru, Will Schroeder @harmj0y, and the PowerView authors. Install Use the executables in the releases section. If you want to build it...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

EUVD-2026-103012

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

CVE-2026-111720

The fish-island-backend software (specifically versions through commit 7c61b78 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) vulnerability. This flaw exists in the GET /api/web/parse endpoint, where the application fails to properly validate the url parameter. Remote at...

EUVD-2026-103011

Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transaction numbers, a '7' prefix plus a snowflake ID, to obtain th...

CVE-2026-111719

The Roncoo-pay application (through commit 9428382) contains a missing authorization vulnerability within the F2FPayController.orderQuery function. This flaw allows unauthenticated attackers to retrieve full serialized payment records of any merchant by supplying a trxNo parameter. Attackers can ...

CVE-2026-111719 Roncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query

Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transaction numbers, a '7' prefix plus a snowflake ID, to obtain th...

EUVD-2026-102994

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/id or the knowledgebaseId parameter of POST...

CVE-2026-111702 ChatOllama through commit 96c3ce5 IDOR Exposes Private Knowledge Bases

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/id or the knowledgebaseId parameter of POST...

CVE-2026-111702 ChatOllama through commit 96c3ce5 IDOR Exposes Private Knowledge Bases

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/id or the knowledgebaseId parameter of POST...