Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-probe A focused, open-source scanning probe for C...

CVE-2025-32432-PoC

CVE-2025-32432: Log-Poisoning to RCE Exploit Tool Description This repository contains a professional proof-of-concept PoC exploit written in Go, designed to demonstrate a critical vulnerability chain in Craft CMS. The exploit leverages a log-poisoning vulnerability that leads to Local File...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...

CVE-2024-34102

CVE-2024-34102 - CosmicSting XXE Exploit Exploit for CVE-2024-34102 CosmicSting - XML External Entity XXE vulnerability in Adobe Commerce and Magento. 📋 About the Vulnerability CVE-2024-34102 is a critical XXE XML External Entity vulnerability affecting: Adobe Commerce versions 2.4.7, 2.4.6-p5,...

CVE-2022-35501

CVE-2022-35501 Stored Cross-site Scripting XSS in blog-post creation functionality in Amasty Blog Pro for Magento 2 Description The post creation functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the title field, leading to XSS...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Stored Cross-Site Scripting XSS Description Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the Name parameter of /vehicle-management/booking.php. A malicious actor can inject malicious payloads into the Name...

CVE-2024-8275

CVE-2024-8275 CVE-2024-8275 is a critical SQL injection vulnerability discovered in the WordPress plugin The Events Calendar. This vulnerability affects versions up to and including 6.6.4. The issue arises from insufficient escaping of the 'order' parameter in the tribehasnextevent function...

CVE-2023-1326

CVE-2023-1326 A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is...

CVE-2023-34835

CVE-2023-34835 — eScan Management Console: Reflected Cross-Site Scripting XSS Table of Contents Overview Vulnerability Details Affected Product Technical Analysis Proof of Concept Steps to Reproduce Impact Mitigation & Remediation References Disclaimer Overview A Reflected Cross-Site Scripting XS...

ResourcePoison

Fix for this issue has appeared as CVE-2025-22441: bulletin patch follow up Passing ApplicationInfo around ApplicationInfo is structure defining various information about installed app, most notably path to apk file from which resources and code are loaded Usually it is passed from system to...

CVE-2026-78070

SQL Injection via ORDER BY Shortcode in plgcontentdpcalendar DPCalendar Free ≤ 10.11.2 — Author-level User Extracts Full Database via Time-Based Blind Injection SUMMARY The plgcontentdpcalendar content plugin parses events order="..."/events shortcodes embedded in Joomla article bodies. The order...

CVE-2026-18953

CVE-2026-18953 — PoC Arbitrary file write in awslabs.aws-transform-mcp-server AWS Transform MCP server via the savePath parameter of the getresource tool. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Improper Limitation of a Pathname to a Restricted Directory Affected|...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denial-of-service via unbounded recursion in TanStack Query'sreplaceEqualDeep function A single crafted query update with deeply nested objects can freeze the JavaScript thread indefinitely , causing complete application unresponsiveness. No authentication or special permission...

CVE-2023-34836

CVE-2023-34836 — eScan Management Console 14.0.1400.2281: Reflected Cross-Site Scripting XSS Overview CVE ID: CVE-2023-34836 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium...

dirble

Introduction Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use. How to Use Download one of the precompiled binaries for Linux, Windows, or Mac, or compile the source using Cargo, then run it from a terminal. The default wordlist...

Signet

Signet Signet is a code signing wrapper for Mythic C2. It takes any wrapped agent binary or uploaded file and applies an Authenticode signature via osslsigncode. Signing modes Generate CA + Cert : creates a self-signed CA and issues a code signing certificate from it. Upload CA : accepts an...

CVE-2026-25514

CVE-2026-25514: FacturaScripts has SQL Injection in Autocomplete Actions Overview Field| Details ---|--- CVE ID| CVE-2026-25514 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products facturascripts/facturascripts versions: 2025.81 CWE Classification CWE-20: Improper...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2026-64638

CVE-2026-64638 — XSS2Shell: WordPress Login Page Pre-Auth XSS → Server RCE HackSpeak distribution mirror. This repository is a distribution mirror of the educational XSS2Shell PoC CVE-2026-64638 released by WordSec , with code identical to upstream; upstream is MIT License, Copyright c 2026...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Complete research writeup & PoC in this repo image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo is set up to always be explicit so PoC works without restart via gRPC. Table of Contents 1. CVE Summary 2...