CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. ⚠️ For educational purposes and authorized audits only. 📑 Table of Contents What is...

CVE-2026-31891

SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw Vulnerability Class : SQL Injection CWE-89 Product : Cockpit CMS Core Edition Affected Version : 2.13.4 and likely all versions since the Aggregation Optimizer was introduced Docker Image Tested : cockpithq/cockpit:core-2.13.4...

SimpleVisor

SimpleVisor SimpleVisor is a simple, portable, Intel x64/EM64T VT-x specific hypervisor with two specific goals: using the least amount of assembly code 10 lines, and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking that is, virtualizing the host...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion Let's Chat Assigned CVE ID: CVE-2026-66751 Summary DELETE /rooms/:room performs no authorization check beyond requiring a login. Any account can archive any room on the server, including private, password protect...

CVE-2026-25890-FileBrowser-Access-Control-Bypass

CVE-2026-25890 - FileBrowser Access Control Bypass Unauthenticated users cannot exploit this — requires valid low-privileged credentials that are restricted from the target path. Path-based authorization bypass in FileBrowser ≤ v2.57.0 using multiple leading slashes //private instead of /private ...

CVE-2025-8110-PoC

CVE-2025-8110 PoC Python proof-of-concept script for CVE-2025-8110 — Gogs v0.13.3 UpdateRepoFile symlink RCE. Single-shot: the malicious PUT itself triggers git fetch → sshCommand → reverse shell. ⚠️ For educational and authorized security research only. Running this tool against systems you do no...

CVE-2024-0012

Palo Alto PAN-OS CVE-2024-0012 Vulnerability Checker This Python script checks for the presence of a critical authentication bypass vulnerability in Palo Alto Networks PAN-OS Management Web Interface, identified as CVE-2024-0012. The vulnerability enables an unauthenticated attacker to gain...

copy-fail-cve-2026-31431

Copy Fail - CVE-2026-31431 This repository provides a Go port of the public Copy Fail PoC and a reproducible build pipeline for multi architecture Linux binaries. Copy Fail CVE-2026-31431 is a Linux kernel logic flaw in authencesn that enables a deterministic 4 byte write into page cache data...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

enforcement-coverage

Enforcement Coverage Finds API routes that carry a weaker authorization control than their siblings. It found CVE-2026-45316 in Open WebUI from source alone, with no advisory knowledge: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite...

CVE-2026-39866

CVE-2026-39866 — Command Injection via unquoted workflow dispatch input Proof-of-concept lab for command injection in GitHub Actions workflow dispatch Purpose CVE-2026-39866 is a command injection bug in Lawnchair's GitHub Actions release workflow. The releaseupdate.yml file passes user input...

CVE-2026-23830-SandBreak

SandBreak CVE-2026-23830 Exploit Generator & Auto-Pwn Tool SandBreak is a robust, Go-based exploit generator designed to leverage the SandboxJS Escape vulnerability CVE-2026-23830. This tool exploits the unprotected AsyncFunction constructor in older versions of sandboxjs, allowing attackers to...

CGA-7JX4-GQRG-6PP2

Bulletin has no description...

spring-shell-vuln

spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...

CVE-2026-119028 oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in...

CVE-2026-119028

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in...

CVE-2026-119027 oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension

oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers.x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define an injected func init that executes wh...

EUVD-2026-112755

oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers.x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define an injected func init that executes wh...

CVE-2026-119027

The oapi-codegen tool (versions 2.5.0 before 2.8.1 ) is vulnerable to a code injection flaw. The root cause is the unescaped emission of the servers[].x-go-name value by the server-urls template. An attacker who controls an OpenAPI document can supply a crafted value to inject arbitrary Go code, ...

EUVD-2026-112756

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in...