AndroidAuto

Open Android Auto An open-source implementation of the Android Auto phone-side app. This app runs on your phone and projects to a car's head unit over USB, replacing Google's proprietary com.google.android.projection.gearhead APK. ⚠️ WORK IN PROGRESS This project is in early development. The...

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Description : A cross-site scripting XSS vulnerability in the component “addnewparent” of School Fees Management System 1.0 allow attackers to execute arbitrary web...

CVE-2021-21551

CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...

OpenNebula-CVE-2025-56536

OpenNebula-CVE-2025-56536 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in user information Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept :...

CVE-2026-42588

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

CVE-2026-37064

CVE-2026-37064 User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Mecanismo inseguro de restablecimiento de contraseña → Toma de control total de la cuenta de administrador Claves de restablecimiento de contraseña en texto plano almacenadas en la base de datos + Inyección SQL = Toma de control total del administrador 📋...

featherduster

FeatherDuster y Cryptanalib FeatherDuster es una herramienta escrita principalmente por Daniel «unicornfurnace» Crowley, junto con contribuciones de la comunidad, para romper criptografía; intenta facilitar al máximo el proceso de identificar y explotar sistemas criptográficos débiles. Cryptanali...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

CVE-2024-57428

CVE-2024-57428 A stored cross-site scripting XSS vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields eventimg, seatmaps and seat number configurations numbernewX in pjActionCreate. Attackers can inject persistent JavaScript, leading to...

cve-2022-26134

CVE-2022-26134 by 1vere$k Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server. CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and...

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this code...

CVE-2022-26134

CVE-2022-26134 - Confluence OGNL injection vulnerability Script Usage Install Python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scanning python3 CVE-2022-26134check.py -f url.txt -c whoami Affected Versions Confluence...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...

CVE-2023-3452-PoC

CVE-2023-3452-PoC - Wordpress Plugin Canto 3.0.5 - Remote File Inclusion RFI - Remote Code Execution RCE - Unauthenticated Here we explain a PoC of the latest RFI Remote File Inclusion vulnerability of the Canto Wordpress Pluging, and we have developed an exploit to automate the execution of...

CVE-2026-50979

CVE-2026-50979: Authenticated Remote Code Execution in oPanel Overview CVE ID: CVE-2026-50979 Product: oPanel Affected Versions: v1.19.50 and earlier Vulnerability Type: Authenticated Command Injection / Remote Code Execution RCE Vulnerable Component: /advanced/curl endpoint Severity: Critical...

linux-4.1.15_CVE-2022-45934

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...