19281 matches found
Exploit for Improper Authentication in Fortinet Fortiproxy
CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin u...
CVE-2025-25255
creationtimestamp| type| source ---|---|--- 2025-11-19 07:52:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60161 2025-11-19 12:50:02+00:00| published-proof-of-concept| https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass/blob/main/watchTowr-vs-Fortiweb-AuthBypass.p...
XSS-
It is an offensive tool for web application security testing. Th...
Exploit for CVE-2025-63406
CVE-2025-63406 PoC Installation bash Install depende...
XWiki view file macro: User can view content of office file without view rights on the attachment
Summary A user with no view rights on a page may see the content of an office attachment displayed with the view file macro. Details If on a public page is displayed an office attachment from a restricted page, a user with no view rights on the restricted page can view the attachment content, no...
CVE-2025-65089
creationtimestamp| type| source ---|---|--- 2025-11-18 16:41:48+00:00| published-proof-of-concept| https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-8c52-x9w7-vc95...
Exploit for Double Free in Microsoft
CVE-2025-62215 Exploit PoC Original code credit: https://gith...
Exploit for Double Free in Openbsd Openssh
CVE-2023-25136 Vulnerability Demonstration This project provi...
CVE-2025-65013
creationtimestamp| type| source ---|---|--- 2025-11-18 12:31:49+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x...
CVE-2025-65014
creationtimestamp| type| source ---|---|--- 2025-11-18 12:31:23+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-5mrf-j8v6-f45g...
GHSA-5J98-MCP5-4VW2 glob CLI: Command injection via -c/--cmd executes matches with shell:true
Summary The glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c is used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to...
CVE-2025-63943
creationtimestamp| type| source ---|---|--- 2025-11-14 21:00:05+00:00| published-proof-of-concept| Telegram/4cRtrOOVHDaY8hidDiXsX2pRwjU2Jcooi4Fr3TpP4Xu3Ko...
CVE-2025-56527
creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...
CVE-2025-56526
creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...
Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts
Cybersecurity researchers are sounding the alert about an authentication bypass vulnerability in Fortinet FortiWeb Web Application Firewall WAF that could allow an attacker to take over admin accounts and completely compromise a device. "The watchTowr team is seeing active, indiscriminate...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization via the shareDeleteHandler function, which handles deletion requests based solely on the share hash, and does not verify whether the link.UserID matches the currently authenticated user's ID d.user.ID. An attacker...
GHSA-6CQF-CFHV-659G File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function
Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...
ALSA-2025:21220 Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: runc: container escape and denial of service due to arbitrary write gadgets and procfs...