CVE-2026-105389

The feelec-yishu feelcrm-os version 1.0.0 is vulnerable to an unrestricted upload vulnerability within the UploadTicketFile Endpoint . The issue stems from unknown processing in the file App/Feelcrm/Crm/Controller/UploadController.class.php , where manipulation of the cmd argument allows for remo...

CVE-2026-105388

A SQL injection vulnerability exists in feelec-yishu feelcrm-os version 1.0.0 . The flaw is located in the index function of the App/Feelcrm/Index/Controller/MemberController.class.php file within the Member Endpoint component. Improper handling of the group_id argument allows an attacker to perf...

CVE-2026-105633

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2026-51592

CVE-2026-51592 — Path Traversal in TahaBakhtari/SubtitleGenerator Summary A path traversal vulnerability exists in the /updatesubtitle endpoint of TahaBakhtari/SubtitleGenerator. The endpoint accepts a filename parameter from an unauthenticated client and joins it with a fixed base directory usin...

awesome-security

Awesome Security Una colección de increíble software, librerías, documentos, libros, recursos y cosas interesantes sobre seguridad. Inspirado por awesome-php, awesome-python. Gracias a todos los contribuyentes, ¡son increíbles y no sería posible sin ustedes! El objetivo es construir una colección...

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

Herramienta de explotación CVE-2025-64446 Herramienta de explotación para la verificación y explotación de la vulnerabilidad CVE-2025-64446 en dispositivos FortiWeb. Descripción Esta herramienta prueba y explota una vulnerabilidad de path traversal CVE-2025-64446 en firewalls de aplicaciones web...

CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services PoC You can...

CVE-2022-40684

CVE-2022-40684 por 1vere$k Por ahora es una copia POC de la CVE-2022-40684 que afecta a los dispositivos Fortinet FortiOS, FortiProxy y FortiSwitchManager. Copiado de https://github.com/horizon3ai/CVE-2022-40684 Análisis El exploit utiliza el siguiente payload simple: PUT...

CVE-2026-105633

The open-source project management tool Plane is vulnerable to an authorization bypass in the V2 issue-attachment PATCH endpoint prior to version 1.4.0 . The root cause is that the server accepts an issue_id in the URL but fails to include it in the database query, matching only on pk, workspace,...

CVE-2026-105633 Plane: Issue Attachment Ownership Hijacking via Missing `issue_id` Scope

Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issueid in the URL but omits it from the database query. A project member can use an issueid they control in the URL while targeting another user's attachment by its pk UUID. Because th...

CVE-2025-54253-Exploit-Demo

🚨 CVE-2025-54253 – Inyección OGNL a RCE en Adobe AEM Forms on JEE 🔎 Descripción general CVE-2025-54253 es una vulnerabilidad crítica de inyección OGNL en Adobe AEM Forms on JEE. Permite a atacantes no autenticados ejecutar comandos arbitrarios del sistema operativo a través del endpoint...

CVE-2026-105630

The Plane project management tool is vulnerable to Stored XSS in versions prior to 1.4.0 . An authenticated low-privilege user, such as a Guest, can upload an image/svg+xml file as an attachment. Because the file retains its attacker-controlled Content-Type and the asset-download endpoint provide...

EUVD-2026-92543

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

CVE-2026-105630 Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

CVE-2021-38647

CVE-2021-38647 Este es un POC para CVE-2021-38647 : Envía una solicitud POST a /wsman con el contenido de payload.xml y solo cambia el comando por el que desees, Como POC, solo se ejecuta el comando id. Fuente: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Sígueme si te gus...

ExchangeRelayX

ExchangeRelayX Versión 1.0.0. Esta herramienta es una PoC para demostrar la capacidad de un atacante de realizar un ataque de relay NTLM basado en SMB o HTTP al endpoint EWS en un servidor Microsoft Exchange local para comprometer el buzón de la víctima. Esta herramienta proporciona al atacante u...

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - Inyección SQL en Institute of Current Students Resumen El punto final loginlinkfaculty en la aplicación Institute-of-Current-Students es vulnerable a Inyección SQL a través del parámetro POST fid. El parámetro no se sanitiza correctamente antes de ser utilizado en una consulta SQ...

CVE-2024-29847

CVE-2024-29847 PoC para la vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en AgentPortal de Ivanti Endpoint Manager CVE-2024-29847 Un análisis de causa raíz de la vulnerabilidad se puede encontrar en mi blog:...

metabase-cve-2023-38646

cd /metabase-poc cat README.md 'EOF' CVE-2023-38646 — Metabase Pre-Auth Remote Code Execution Summary CVSS 9.8. Metabase versions before 0.46.6.1 / 1.46.6.1 and equivalent earlier branches expose a pre-authentication RCE via the /api/setup/validate endpoint, which is meant to validate database...