CVE-2024-55457-PoC

CVE-2024-55457-PoC MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of...

cve-2026-20127

CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127. Features IP range scanning start → end...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...

CVE-2021-44132

CVE-2021-44132 This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOM...

CVE-2026-5530

CVE-2026-5530 Ollama SSRF via OCI registry redirect with full response exfiltration. Writeup: https://davidrochester.com/posts/cve-2026-5530 Disclosure Ollama was contacted multiple times with no response. Usage Three modes: enum, exfil, and probe. Enum Finds live internal endpoints reachable fro...

CVE-2026-2058-PoC

CVE-2026-2058-PoC – CloudClassroom PHP Project SQL Injection Overview A SQL Injection vulnerability exists in the Post Query functionality of the CloudClassroom PHP Project v1.0. The vulnerability allows attackers to inject arbitrary SQL commands via the squeryx POST parameter, leading to databas...

CVE-2024-56512-Apache-NiFi-Exploit

NiFiExploit A tool to exploit the CVE-2024-56512 vulnerability in Apache NiFi , which allows unauthorized access to sensitive data through improperly secured APIs...

CVE-2021-26084

CVE-2021-26084 Description - POC of CVE-2021-26084, which is Atlassian Confluence Server OGNLObject-Graph Navigation Language Pre-Auth RCE Injection Vulneralibity. - create by antx at 2022-01-13. Detail - In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: SQL Injection CWE: CWE-89 Affected Endpoint: /admin/jobs-admins/delete-jobs.php Parameter: id GET Impact: Allows deletion of all job records in th...

CVE-2026-6183-SQLI

SQL Injection via id Parameter in index.php - Simple Content Management System in PHP Description A SQL Injection vulnerability exists in Simple Content Management System PHP. The id parameter in index.php is not sanitized before being passed to the SQL query, allowing an unauthenticated attacker...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

CVE-2023-22527

CVE-2023-22527 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE which tested and proven POC in vulnerable instance of confluence data center and servers. By this an attacker can execute arbitary code on vulnerable instance Installation:...

CVE-2026-36374

Description A public endpoint has been identified that allows certificate lookup using a predictable identifier certificate code, without any authentication or authorization mechanism. By enumerating this identifier, an attacker can access third-party personal data, including full name, CPF...

CVE-2026-22730-Scanner

CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection A professional security assessment tool for CVE-2026-22730 – a critical SQL injection vulnerability discovered in Spring AI's MariaDB vector store. This tool allows authorised penetration testers and security...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC root@kitploit: POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0...

CVE-2023-22527-POC

CVE-2023-22527 &color=brighgreen%3E Description A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.Most recent supported...

Blackash-CVE-2025-61884

CVE-2025-61884 New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login 💀 CVE-2025-61884 — Complete summary 🧾💥...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

CVE-2026-56738

The open-source FAQ web application phpMyFAQ is vulnerable to SQL Injection in the StopWords::add() method in versions prior to 4.1.6 . The root cause is the direct insertion of user-supplied stop word values into a SQL INSERT statement using sprintf() without proper database escaping. While the ...

EUVD-2026-86288

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/objecttype/id/files/fileid allows an authenticated user with file-management access to upload XML and XSLT attachments and request them with the inline=true parameter. The...