CVE-2021-3019

CVE-2021-3019 CVE-2021-3019 lanproxy directory traversal arbitrary file reading vulnerability Usage Download git clone https://github.com/FanqXu/CVE-2021-3019.git cd CVE-2021-3019 Help Run without parameters to display help information Single URL Detect vulnerabilities on a single URL. If a...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...

CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API TL;DR A remote code execution vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary code by invoking the addNetworkConnectorString MBean operation through the Jolokia API /api/jolokia/. The attacker embed...

CVE-2025-63571

Description During analysis of the AI ​​system ChatGPT GPT-5, a Server-Side Request Forgery SSRF vulnerability was discovered. This issue occurs because the application automatically fetches and executes external URLs submitted by users e.g., webhooks without any validation or sanitization. By...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhigh Secure Web...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

palo-alto-cve-2026-0265-checker

CVE-2026-0265 Risk Checker for Palo Alto PAN-OS A Python script that connects to a list of Palo Alto Networks firewalls and Panorama appliances over SSH and reports each device's exposure to CVE-2026-0265 — an authentication bypass vulnerability in PAN-OS affecting devices with the Cloud...

CVE-2019-20361-EXPLOIT

CVE-2019-20361-EXPLOIT There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability. This script is a "sanized-version" of original script avalible on...

CVE-2025-65270

CVE-2025-65270 ⚠️ Disclaimer This repository is for educational and defensive security research only 🔥 Overview Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3 , allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's...

apache__dolphinscheduler_CVE-2022-34662_2-0-9

Dolphin Scheduler Official Website dolphinscheduler.apache.org Total Lines Design Features DolphinScheduler is a distributed and extensible workflow scheduler platform with powerful DAG visual interfaces, dedicated to solving complex job dependencies in the data pipeline and providing various typ...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2026-5118

Divi Form Builder ⚠️ WARNING: This tool is for authorized penetration testing and security research only. Unauthorized access to computer systems is illegal. Use only on systems you own or have explicit written permission to test. More Disclaimer You can see the disclaimer on the cover of...

CVE-2026-49048-JoomCCK-SQLi

CVE-2026-49048 — JoomCCK 6.4.0 Unauthenticated SQL Injection CVSS 9.8 CVE: CVE-2026-49048 Status: Public disclosure. Reported to Joomla Security Strike Team JSST — Ticket 282420. Advisory Summary Field| Value ---|--- Advisory ID| JOOMCCK-2026-001 CVE| CVE-2026-49048 Product| JoomCCK comjoomcck —...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2023-1454

CVE-2023-1454 CVE-2023-1454 Vulnerability Detection Script This article is for reference only. Do not use the technical materials and tools in this article to intrude into any computer system without authorization. The direct or indirect consequences and losses caused by the information provided ...

Crescendo

Table of Contents 1. Getting Started 2. Requirements 3. Components 4. Testing and Development 5. Signing 6. Building 7. Issues/Bugs/Features 8. Troubleshooting 9. TODO Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1. Ensure that...

CVE-2026-48030

CVE-2026-48030 — OS Command Injection in Pheditor Overview Field| Details ---|--- CVE ID| CVE-2026-48030 Product| pheditor Vendor| Hamid Samak Affected Versions| 2.0.1, 2.0.2, 2.0.3 Patched Version| 2.0.4 Severity| Critical CVSS Score| 9.9 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H...

CVE-2026-5027-Langflow

CVE-2026-5027 and CVE-2026-10520 CVE-2026-25089 exploiter: Clone git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Usage exploit.py file Automatic testing and exploitation. python3 exploit.py -u https://target.com CLI custom settings Use your own webshell...