76269 matches found
CVE-2026-73309
CVE-2026-73309: Empty OAuth2 credentials bypass XenForo before 2.3.13 can skip OAuth2 client-secret and PKCE verification when an empty string reaches the token endpoint. What happens The endpoint checks whether clientsecret and codeverifier keys exist, then performs the comparisons only when the...
Safenet_SAC_CVE-2021-42056
Safenet Authentication Client Privilege Escalation CVE-2021-42056 Based on Thales' website 1, SafeNet Authentication Client β is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, USB and...
CVE-2016-2434
CVE-2016-2434...
CVE-2025-1910-WatchGuard-Privilege-Escalation
WatchGuard Mobile VPN with SSL Client Privilege Escalation CVE-2025-1910 A privilege escalation vulnerability in WatchGuard's Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. Serve the malicious client.wgssl file via flask: Sta...
cve-2026-29204-whmcs-clientarea-addonid
CVE-2026-29204 β WHMCS client area addon guard Unofficial community notes for CVE-2026-29204: on clientarea.php?action=productdetails, a logged-in client can supply a foreign addonId with modop=custom and reach module context that does not belong to the session. Upgrade first. Apply a...
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...
CVE-2025-47812
CVE-2025-47812 How does this detection method work? This Nuclei template detects Wing FTP Server instances vulnerable to CVE-2025-47812 by identifying versions older than 7.4.4 exposed in the web clientβs HTML response. How do I run this script? 1. Download Nuclei from here 2. Copy the template t...
WiFi-Pineapple-MK7_REST-Client
WIFI PINEAPPLE MARK VII - REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright :...
chaos-client
Chaos Client Go client to communicate with Chaos dataset API. English β’ δΈζ Installation go install -v github.com/projectdiscovery/chaos-client/cmd/chaos@latest Usage chaos -h This will display help for the tool. Here are all the switches it supports. -key string projectdiscovery cloud pdcp api ke...
CVE-2026-9086-poc
CVE-2026-9086: Keycloak URI Scheme Validation Bypass XSS PoC ζ₯ζ¬θͺη Overview This repository contains a Proof of Concept PoC for CVE-2026-9086 , a Cross-Site Scripting XSS vulnerability in Keycloak client URI validation. Vulnerable Keycloak versions compared the prohibited javascript: and data:...
sidedoor
sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...
wsh
wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...
CVE-2020-10770-keycloak-exploit-poc
Keycloak Blind SSRF POC This is a step by step walk-through about how to test the Blind SSRF CVE-2020-10770 found by Lauritz Holtmann and documented in his blog post. He also briefly explained how to test it. This is just a more detailed explanation. All credits go to Lauritz. Setup I use Docker ...
cve-2022-0778
cve-2022-0778 bad server go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat bad client cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat build docker build -t cve-2022-0778 . docker hub start vulned server docker pull...
PoC-CVE-2024-24035
CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...
gdog
Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...
kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed
Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...
CVE-2026-50751-Mitigation-Scripts
CVE-2026-50751-Mitigation-Scripts There are multiple mitigation techniques you can use from the sk; https://support.checkpoint.com/results/sk/sk185033 1. Disable legacy client support. 2. Configure Remote Access to only use ike v2 There are scripts for both of those changes; Please...
ppfuzz
ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. π¦ Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation Binary Simply,...
By-Poloss..-..CVE-2026-15038-POC
π¨ CVE-2026-15038 β InfiniteWP Client Admin Takeover Unauthenticated Admin Account Takeover in WordPress Multisite π Overview InfiniteWP Client plugin for WordPress getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey' Reader : Uses getsiteoption β reads from...