CVE-2026-59355

In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a request containing an invalid requesturi paired with an unvalidated redirecturi, which can result in an open redirect to...

CVE-2021-1965

CVE-2021-1965 CVE-2021-1965 WiFi Zero Click RCE Trigger PoC This is a quick&dirty Proof-of-Concept code to verify if your phone is vulnerable. After running the poc code, your phone is supposed to crash&reboot within seconds. In case you need more info about the bug & vulnerable code, here you ar...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

CVE-2026-26198-analysis

CVE-2026-26198 — SQL Injection in Ormar ORM A deep dive into a critical CVSS 9.8 SQL injection vulnerability in a Python async ORM, with reproduction, analysis, and fix. The Vulnerability Ormar is a popular async mini ORM for Python, commonly used with FastAPI and Starlette. Versions 0.9.9 throug...

CVE-2025-32463

CVE-2025-32463 - Setup and Execution Guide This is the first time I’ve ported a malicious exploit into a Nuclei template for a non-intrusive vulnerability scan that still demonstrates the underlying issue. I documented the process in more detail expressly as a learning exercise. My main challenge...

CVE-2025-57457

OS Command Injection in CURO UC300 IP Phone An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 Step...

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce = 33.0.15 This repository contains a Proof of Concept PoC for an unauthenticated time-based blind SQL Injection vulnerability in the "PPOM for WooCommerce" WordPress plugin, affecting versions up to and including 33.0.15. Vulnerability...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

SkillSpector v2.10.0

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - Reflected XSS found in i-doit Open v24 and below i-doit Open v24 and below are vulnerable to Reflected XSS vulnerability. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. Description of product : i-doit is a web based Open...

CVE-2019-7482

Multiple Vulnerabilities in SonicWall SMA/SRA Appliances CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 First Published: 26 Feb 2020 14:00 GMT Status: Developing Last Updated: 26 Feb 2020 14:00 GMT CVSS Score: 9.8 Summary On 18 Dec 2019, SonicWall CSIRT...

reconftw

reconFTW !Dockerhttps://img.shields.io/badge/docker-%230db7ed.svg?style=for-the-badge&logo=docker&logoColor=w...

reconftw

reconFTW !Dockerhttps://img.shields.io/badge/docker-%230db7ed.svg?style=for-the-badge&lo...

CVE-2026-33017-Exploit

CVE-2026-33017 - Langflow Unauthenticated RCE root@kitploit: / \ | | \ ^ / ||||| exec with no auth, no sandbox, no hope. Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope - execcompiledcode - arbitrary co...

iVANTI-CVE-2021-38560

iVANTI-CVE-2021-38560 Ivanti Service Manager 2021.1 infected with reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: IVANTI Affected Product Versions: Service Manager - =...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC The vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host. Description The POST /api/v1/buildpublictmp/flowid/flow endpoint permits anyone to build public flows without authenticatio...

CVE-2021-46005

CVE-2021-46005 All Details about CVE-2021-46005 Software: Online Car Rental System 1.0 Software Link: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Vulnerability Type: Stored Cross Site Scripting Affected Component: vehicalorcview in post-avehical page Impac...

CVE-2023-6567-poc

CVE-2023-6567-poc Time-based SQLi Description The plugin does not properly sanitise and escape the orderby parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users 1. Vulnerable GET request:...

TheLastBundleMismatch

Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: root@kitploit: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java...