CVE-2025-51411

🛡️ CVE Disclosure: CVE-2025-51411 — Reflected XSS in Institute-of-Current-Students Disclosure Date: 25 July 2025 CVE ID: CVE-2025-51411 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the Institute-of-Current-Students v1.0 project, specifically...

CVE-2025-67445

Overview A vulnerability in the TOTOLINK X5000R V9.1.0cu.2415 web management interface allows an unauthenticated remote attacker on the LAN to crash the web service via a segmentation fault. By sending an oversized HTTP POST request to the CGI endpoint, an attacker can trigger memory exhaustion,...

CVE-2023-31714

CVE-2023-31714 - Chitor-CMS 1.1.2 Pre-Auth SQL Injection Found by msd0pe https://github.com/waqaskanju/Chitor-CMS Project by waqaskanju chitor1.1.py Patched since 69d3442 commit 2023/04/13 SQL Injection was found in the /editschool.php?id= endpoint and doesn't need any authentication. chitor1.0.p...

CVE-2025-49132

Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...

CVE-2025-45346

CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreSQL Version Extraction 📝 Overview Vulnerability Title : Time-Based Blind SQL Injection in Bacula-Web Product : Bacula-Web Versions Affected : Confirmed in versions supporting PostgreSQL backend CVE ID : CVE-2025-45346 Severity : High...

CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security Free, Pro, and Pro Multisite 9.0.0 - 9.1.1.1 - Authentication Bypass 📖 Description This script exploits a vulnerability in the Really Simple Security plugin versions 9.0.0 - 9.1.1.1 for WordPress.The flaw allows authentication bypass due to improper...

CVE-2025-57819

CVE-2025-57819 — FreePBX 16 Endpoint Manager: неаутентифицированная SQL-инъекция с повышением до RCE Неаутентифицированная stacked SQL-инъекция в модуле Endpoint Manager FreePBX admin/ajax.php, параметр brand, CVE-2025-57819, затрагивающая FreePBX framework --vhost --root --cmd Как это работает 1...

CVE-2025-66954

CVE-2025-66954 – Buffalo LinkStation Username Enumeration via IDOR Summary A vulnerability in Buffalo LinkStation firmware version 1.85-0.01 allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue arises due to improper access contr...

CVE-2022-22947-pb-ai

Application de validation de vulnérabilité CVE-2022-22947 Spring Cloud Gateway Il s'agit d'une application Spring Cloud Gateway spécialement conçue pour démontrer et valider la vulnérabilité CVE-2022-22947. Cette application utilise une version vulnérable de Spring Cloud Gateway et permet...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

CVE-2026-105215

ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client-supplied external identity fields without a completed IdP callback. Unauthenticated attackers can submit forged...

CVE-2024-24919

Check point:CVE-2024-24919 run CVE nuclei -list chick.txt -t CVE-2024-24919.yaml Replace with the target IP address, and this command will attempt to access the /etc/shadow file, which contains password hashes. curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H 'Content-Length: 3...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 Minio Information Disclosure Exploit Usage Write url into urls.txt, then directly run python CVE-2023-28432.py Compatible formats: http://ip:port, ip:port python CVE-2023-28432.py ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ █████╗ ██╗ ██╗██████╗...

CVE-2023-4220-Chamilo-LMS

Chamilo LMS Unauthenticated Big Upload File RCE PoC This script allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220. The system is vulnerable in versions preceding 1.11.24. Usage Clone the repository to your machine and install the dependencies using pip...

CVE-2021-3019

CVE-2021-3019 Add IPs to the ip.txt file, note the format: http://127.0.0.1 One per line Open Cheeetah and run it...

CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - reflected Cross-Site Scripting XSS Description: A reflected XSS vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code Steps to exploit: 1- Login to the CMS and Navigate to the delete...

CVE-2018-16373

CVE-2018-16373 Il existe une vulnérabilité de téléchargement qui peut créer un fichier via /admin/?/plugin/filemanager/save, plus de détails voir : https://github.com/philippe/FrogCMS/issues/13...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

CVE-2026-105148

A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...