278158 matches found
📄 OpenClaw Dashboard Cross Site Scripting
OpenClaw Dashboard suffers from a persistent cross site scripting vulnerability via the lastMessage Session Field. Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft openclaw-dashboard Title: OpenClaw Dashboard Stored XSS via lastMessage Session Field...
📄 Telenia Software TVox 26.5.3 Authentication Bypass
Telenia Software TVox version 26.5.3 and below suffer from an authentication bypass vulnerability in setenv.php. --------------------------------------------------------------------------------- Telenia Software TVox accessToken !== trim$accessToken 300. $force = true; 301. i...
📄 Telenia Software TVox 26.5.3 Command Injection
Telenia Software TVox versions 26.5.3 and below suffer from a command injection vulnerability in actionaudio.php. ------------------------------------------------------------------------------------- Telenia Software TVox = 26.5.3 actionaudio.php OS Command Injection Vulnerability...
📄 Gogs 0.13.3 Authenticated Remote Code Execution
A proof of concept exploit for a Gogs version 0.13.3 authenticated remote code execution vulnerability. Gogs versions 0.13.3 and earlier contain a symlink handling flaw in the PUT /api/v1/repos///contents/ endpoint where updates to existing files bypass the symlink protection introduced for...
📄 osTicket 1.18.3 Authentication Bypass Account Takeover
A proof of concept exploit for an osTicket version 1.18.3 authentication bypass account takeover vulnerability. osTicket versions 1.17.8 through 1.18.3 contain a flaw in PasswordResetTokenBackend::signOn where the password reset expiration check is incorrectly guarded by a short-circuiting logica...
📄 OpenClaw Dashboard 3.0.0 Cross Site Scripting
OpenClaw Dashboard version 3.0.0 suffers from a persistent cross site scripting vulnerability in the Failed Login Username Field. Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover openclaw-dashboard Title: OpenClaw Dashboard v3.0.0 Stored XSS...
📄 SiYuan 3.7.1 Authentication Bypass / Arbitrary File Write
A proof of concept exploit for a SiYuan version 3.7.1 authentication bypass arbitrary file read and write vulnerability. SiYuan kernel versions 3.7.0 through 3.7.1 contain a missing authorization vulnerability in the Publish reverse proxy where anonymous RoleReader requests are permitted to acces...
Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware
AVERTISSEMENT ÉTHIQUE - LECTURE OBLIGATOIRE Ce docume...
totolink-exploit
Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...
totolink-exploit
Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...
Exodia
Exodia Autonomous AI-driven penetrat...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
CVE-2026-39987 - marimo Terminal WebSocket Authentication Bypa...
Exploit for CVE-2025-48932
CVE-2025-48932-Invision-Community-SQLi-Exploit CVE-2025-48932...
Exploit for CVE-2026-13714
CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...
simple-ReDos
ReDOS Timing Attack Exploit Overview This Python script d...
Exploit for Path Traversal in Stitionai Devika
CVE-2024-40422 Python implementation...