277984 matches found
xss-vulnerability-demo
xss-vulnerability-...
wp-file-manager-poc-chain
wp-file-manager-poc-chain A professional offensive security p...
wp-file-manager-poc-chain
wp-file-manager-poc-chain Offensive security proof-of-concept...
Exploit for Incorrect Authorization in Canonical Ubuntu_Linux
CVE-2021-34...
Payload CMS 3.72.0 - Blind SQL Injection
Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection Google Dork: N/A Date: 2026-08-01 Exploit Author: cardosource Vendor Homepage: https://payloadcms.com/ Software Link: https://github.com/payloadcms/payload Version: requests.Response: url: str = "http://localhost:3000/api/posts"...
EasyAppointments 1.5.1 - Blind SQL Injection
Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection Google Dork: N/A backend login required Date: 07/27/2026 Exploit Author: Michael Chesang Vendor Homepage: https://easyappointments.org Software Link: https://github.com/alextselegidis/easyappointments/releases Version: = 1.5.1 REQUIRED...
SPIP 4.4.8 Insecure Deserialization
SPIP versions 4.4.0 through 4.4.8 contain an insecure deserialization vulnerability in the public area through the tablevaleur filter and DATA iterator. An attacker able to place malicious serialized content can trigger arbitrary object instantiation and potentially achieve remote code execution...
Bludit CMS 3.22.0 Cross Site Scripting
Bludit CMS version 3.22.0 suffers from an SVG related cross site scripting vulnerability. Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22....
Wolf CMS 0.8.3.1 - RCE v
Exploit Title: Wolf CMS 0.8.3.1 - RCE Date: 02-08-2026 Exploit Author: Balachandar Gowrisankar Software Link: https://github.com/wolfcms/wolfcms Version: -u -p Example Usage: python exploit.py http://127.0.0.1:8080/ -u admin -p admin import requests import argparse from bs4 import BeautifulSoup...
miniOrange 5.4.3 - Unauthenticated Auth Bypass
Exploit Title: miniOrange 5.4.3 - Unauthenticated Auth Bypass Google Dork: inurl:/wp-content/plugins/miniorange-saml-20-single-sign-on/ Date: 2026-07-27 Exploit Author: zer0dayf Vendor Homepage: https://plugins.wordpress.org/miniorange-saml-20-single-sign-on/ Software Link:...
Payload CMS 3.72.0 SQL Injection
Payload CMS version 3.72.0 suffers from a remote blind SQL injection vulnerability. Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection Google Dork: N/A Date: 2026-08-01 Exploit Author: cardosource Vendor Homepage: https://payloadcms.com/ Software Link: https://github.com/payloadcms/payload...
Bludit CMS - Stored XSS
Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22.0 Tested on: Windows 10 x64 Description: sanitizeSVG strips script/on but does not remove...
Grav CMS 2.0.7 - RCE
!/usr/bin/env python3 Exploit Title: Grav CMS 2.0.7 - Remote Code Execution Date: 2026-07-27 Exploit Author: zer0dayf Vendor Homepage: https://getgrav.org/ Software Link: https://github.com/getgrav/grav Version: Grav CMS 2.0.7 Tested on: Ubuntu 22.04 / PHP 8.2 CVE : CVE-2026-65008 """...
ArcadeDB 26.8.0 Path Traversal
ArcadeDB contains a path traversal vulnerability in the create database and drop database server commands. An authenticated root user can supply a crafted database name containing directory traversal sequences to create database files outside the configured database directory or recursively delet...
EasyAppointments 1.5.1 Blind SQL Injection
A blind SQL injection vulnerability exists in the orderby parameter of the /index.php/customers/search endpoint in EasyAppointments versions 1.5.1 and below. The parameter is passed unsanitized to CodeIgniter 3 Query Builder orderby. Parenthesized subqueries bypass backtick escaping via CI3's...
poc-container-escape
poccontainerescape Enumeración y explotación de vectores...
Exploit for CVE-2025-69080
No d...
Exploit for Cross-site Scripting in Interzen Zencrm
ZenShare Suite - Vulnerability Disclosure This repository con...