CVE-2026-97368

A weakness exists in chillzhuang SpringBlade versions up to 5.0.2 , specifically within the UserServiceImpl.userInfo function located in the blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java file of the user-auth-info Endpoint . An attacker can remo...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise Password Reset Account Takeover ATO For research and testing purposes only! I am not responsible for any damages to live infrastructure if this tool is not used as intended. Only use on systems you own or have permission to be testing! Usage usage: CVE-2025-58434-PasswordResetNew.py -h -u...

CVE-2024-57610

Lack of Rate Limiting in Sylius v2.0.2 Vendor Homepage: https://sylius.com/ Steps to Reproduce 1.Navigate to https://store.sylius.com/login 2.Attempt multiple login requests using automated tools or scripts e.g., Burp Suite, cURL. 3.Observe that no rate limiting is applied, and requests are...

CVE-2025-25296

CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...

routers-exploit

Repo OpenSource con PoCs y vulnerabilidades encontradas en routers TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS CVE-2020-9374 - TP LINK TL-WR849N - PoC de EJECUCIÓN REMOTA DE COMANDOS Payload: "$ls" TP LINK TL-WR849N - Bypass de autenticación: actualización de firmware y configuracione...

Apache-Solr-Arbitrary-File-Read

Apache Solr Lectura Arbitraria de Archivos Hit Counter Apache Solr por sus siglas en inglés de Searching On Lucene with Replication es un motor de búsqueda gratuito y de código abierto basado en la librería Apache Lucene. Está escrito en Java. Apache Solr dispone de APIs RESTful XML/HTTP y JSON y...

CVE-2023-20198-Exploit

Bypass de Autenticación en Cisco IOS XE CVE-2023-20198 Este repositorio contiene un exploit de prueba de concepto para CVE-2023-20198 , una vulnerabilidad de bypass de autenticación que afecta a la interfaz web de Cisco IOS XE. La vulnerabilidad permite a atacantes no autenticados ejecutar comand...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Scripts en Python para la explotación de CVE-2024-51482 SQLi en ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descripción Este script automatiza la extracción de bases de datos, tablas, columnas y credenciales aprovechando CVE-2024-51482, una vulnerabilidad de...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

CVE-2025-70849-Podinfo

CVE-2025-70849: XSS Almacenado en Podinfo Resumen Se identificó una vulnerabilidad de seguridad CWE-79 en Podinfo , una aplicación web para demostrar microservicios en Kubernetes. La funcionalidad /store permite a usuarios no autenticados cargar contenido arbitrario en HTML/JS, lo que provoca XSS...

home_SOC_suite

Home SOC Suite — Night's Watch A personal Security Operations Center SOC built from scratch during an Anwendungsentwicklung retraining program. This suite monitors a Windows endpoint for network anomalies, resource spikes, process execution, registry changes, Security Event Log activity, schedule...

cups-script-final-project

What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...

EUVD-2026-42475

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard /browser endpoint...

CVE-2026-97321

A vulnerability has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The impacted element is the function GoViewDataServiceImpl.getDataBySQL of the file yudao-module-report/src/main/java/cn/iocoder/yudao/module/report/service/goview/GoViewDataServiceImpl.java of the component GoVie...

DEBIAN-CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

CVE-2025-3248

Technical Analysis & Defensive Guide: CVE-2025-3248 Langflow Code Injection An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow. 📌 Vulnerability Profile CVE ID: CVE-2025-3248 Vulnerability Type: Remote Code Execution RCE /...

CVE-2025-55182

CVE-2025-55182 - React2Shell CVE-2025-55182 RCE no autenticado mediante deserialización de Flight de React Server Components Exploit independiente para CVE-2025-55182 en aplicaciones Next.js App Router que habilitan React Server Components. Payloads RSC Flight manipulados enviados al endpoint de...

CVE-2026-73320

CVE-2026-73320: Unauthenticated unfurl result disclosure XenForo before 2.3.13 exposes pending rich-link previews through an unauthenticated endpoint keyed by predictable integer IDs. What happens unfurl.php accepts a POST containing global UnfurlResult IDs, loads those rows, and returns rendered...