CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

CVE-2026-112891

A flaw was found in Pillow. A remote attacker can cause a Denial of Service DoS by providing a specially crafted image with an excessively large comment to an application that saves it as a GIF. Due to inefficient data copying while assembling image headers, processing such comments consumes...

Tell-Me-Root

Tell Me Root Batch Detection Tool Based on cve-2026-24061 Telnet Remote Authentication Bypass Vulnerability This is a super super super lightweight tool written in Python! Hands-free, batch scanning, just sit back and wait for the shell to be fed to you! Even a paramecium can easily dig out...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

Another-Metabase-RCE-CVE-2023-38646

Extension of the Pre-Auth RCE in Metabase CVE-2023-38646 explained here This helped me to avoid errors related to "database already in use" with H2 and postgre as engines "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null, "refingerprint":...

element-fragment-guest

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · element-fragment-guest element-fragment-guest Element Web v1.12.29 - Element / New Vector Class: Session destruction Reach: Remote Lifecycle.loadSession prefers guestuserid and guestaccesstoken from the URL hash over...

CVE-2024-24919-POC

CVE-2024-24919-POC A Simple tool to Automate CVE-2024-24919 Exposure of Sensitive Information Features Easy to Use. Helpful Comments; Can Test Multiple Domains Usage git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh ./CVE-2024–24919.sh...

CVE-2026-113600

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

CVE-2016-4437

CVE-2016-4437 Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcoded Encryption Key Example Usage: ./CVE-2016-4437.py -c nslookup -u https://example.com/ -i ecsepnkqtxlishpynfdge01543e4vmx7v.oast.fun See comments and the code for more information...

CVE-2026-113600

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

EUVD-2026-105166

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

CVE-2026-113600 Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

CVE-2026-113600

Fat Free CRM before version 0.26.0 is vulnerable to an insecure direct object reference (IDOR) within the CommentsController . The root cause is the use of an unscoped Comment.find method in both the update and destroy actions without implementing proper authorization checks. This allows authenti...

CVE-2026-113600 Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy

Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsControllerupdate and destroy use an unscoped Comment.find without authorization checks. Attackers can send PUT or DELETE...

check-copyfail-cve-2026-31431

check-copyfail check-copyfail.sh is a read-only Bash script that assesses host exposure to CVE-2026-31431 "Copy Fail". Author: Silent4Labs It inspects the local system for: kernel version and known upstream patch state affected distribution baselines algifaead module status active AFALG socket...

CVE-2026-93485

⚡ CVE-2026-93485 - Comment2Shell 🧬 Overview CVE-2026-93485 is a high-severity cross-site scripting vulnerability affecting the WordPress core. The vulnerability is described as improper neutralization of user-controlled input during web-page generation, resulting in DOM-based XSS / stored XSS...

CVE-2026-4253-Scanner

CVE-2026-42530 — Safe-Check Scanner Non-destructive mass scanner for the NGINX HTTP/3 QUIC use-after-free Inventory which of your hosts are exposed — without ever triggering the bug. ⚠️ Disclaimer This tool is for authorized security testing only — your own infrastructure, or systems you have...

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc., that get...