SiYuan <= v3.6.1 - Path Traversal

SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under /appearance/filepath. Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server...

Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration

Parse Server 8.6.21 / 9.x 9.5.2 contains an information disclosure vulnerability caused by improper handling of the redirectClassNameForKey query parameter, letting authenticated or unauthenticated attackers exfiltrate session tokens, exploit requires ability to create or update an object with a...

Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components: CVE| Packages| Severity| Description ---|---|---|---...

cve-2026-52910-poc

CVE-2026-52910 — reuseport cBPF use-after-free reproducer A race reproducer and stress toolkit for CVE-2026-52910 , a use-after-free UAF in the Linux kernel's handling of classic BPF cBPF reuseport selector programs , fixed upstream by commit "bpf: Free reuseport cBPF prog after RCU grace period"...

CVE-2026-35001

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

Show Your Support If you find this script useful and it has helped you safeguard your systems against CVE-2024-3094, please consider giving it a star ⭐ . Starring this repository not only shows your support but also helps more people discover and benefit from our collective effort to improve...

CVE-2025-69219

CVE-2025-69219 — Apache Airflow Providers HTTP RCE via Unsafe Pickle Deserialization Severity: High CVSS 3.1: 8.8 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — Improper Control of Dynamically-Managed Code Resources Affected: apache-airflow-providers-http = 5.1.0, Fixed in:...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 Vulnerability Lab Overview This laboratory environment demonstrates CVE-2023-6933, a critical PHP Object Injection vulnerability in the Better Search Replace WordPress plugin versions ≤1.4.4. Vulnerability Details CVE ID : CVE-2023-6933 CVSS Score : 9.8 Critical Affected Plugin :...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

CVE-2024-2053

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE-2024-2053 Artica Proxy 📝 Description This Python3 script exploits Local File Inclusion LFI vulnerabilities to achieve Remote Code Execution RCE through log poisoning techniques. Specifically designed for Artica Proxy CVE-2024-2053 but...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application This is a vulnerable application to test the exploit for the Jetpack 13.9.1 broken access control CVE-2024-9926. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a...

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Privilege Escalation Authenticated Privilege Escalation via Crafted File Upload A vulnerability affecting Cisco Catalyst SD-WAN Manager that allows authenticated attackers with administrative privileges to execute arbitrary commands as root. 📖...

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Manual Mitigation - OpenSSH CVE-2025-26465 & CVE-2025-26466 🔍 About the Script This script applies manual mitigations for security issues in OpenSSH , without the need for immediate update. 🚨 CVE-2025-26465 Removes VerifyHostKeyDNS to prevent SSH connection interception. 🚨 CVE-2025-26466 Adjust...

Gitlab-RCE

Analysis of RCE vulnerability on Gitlab CVE-2021–22192 I Building This bug occurs on GitLab Community Edition CE and Enterprise Edition EE in versions =13.2, =13.8, =13.9, 13.9.4 You can follow the instructions of lyy289065406 to set up the environment. II Analysis When I started to analyze this...

CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh

From Detection to Remediation: Hunting and Patching a Real SSRF CVE-2025-68616 in WeasyPrint with Wazuh TL;DR During a personal practice exercise with Wazuh open source SIEM/XDR on a Kali Linux machine, the Vulnerability Detection module identified a High CVSS 7.5 severity vulnerability in the...

CVE-2025-29448

CVE-2025-29448 Description booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability. Steps to Reproduce 1. Intercept an appointment booking reques...

CVE-2026-35001 OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...

EUVD-2026-98233

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension metadata. Attackers can exploit the unvalidated...

CVE-2026-35001

The OpenS100 software (through commit daa35b ) is vulnerable to an integer overflow within the S-102 Bathymetric Surface parser . The root cause is the unvalidated multiplication of numPointsLatitudinal and numPointsLongitudinal values in the S102_VG_BathymetryCoverage::Read() function. By provid...