📄 Vaadin 25.x Authentication Bypass

An authentication bypass affects Vaadin versions 6.8.13, 14.x, 23.x, 24.x, and 25.x when used with Spring Security, due to inconsistent path pattern matching on reserved framework routes. Accessing the /VAADIN endpoint without a trailing slash can bypass security filters, allowing unauthenticated...

pentestfr

Pentest Framework — Kali Linux / VirtualBox Framework Python...

Exploit for OS Command Injection in Webmin

CVE-2019-15107 - Webmin Unauthenticated RCE Description T...

sqlmap-gui

SQLMAP GUI — Manual de Usuario Versión: 1.0.0 Platafo...

Exploit for CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ RCE vía Jolokia API Descr...

Exploit for CVE-2026-23398

cve-2026-...

Exploit for CVE-2026-39363

CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read...

xss-payloads

xss cheatsheet - xss Portswiggerhttps://portswigge...

CVE1

No d...

Exploit for OS Command Injection in Magnussolution Magnusbilling

THM-MagnusBilling-CVE-2023-30258 Perfect! Let’s convert your f...

Exploit for OS Command Injection in Magnussolution Magnusbilling

THM-MagnusBilling-CVE-2023-30258 Perfect! Let’s convert your f...

sql-injection-lab

No d...

Exploit for CVE-2026-3288

CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Control...

Magento-Polyshell-RCE

Magento-Polys...

Exploit for SQL Injection in Apache Superset

CVE-2026-23980 - Apache Superset Authenticated SQL Injection...

sql-bypass

No d...

shannon-defender-skill

shannondefenderskill 🛡️ Shannon Defender – Trae Solo Coder...

qualcomm_avb_exploit_poc

qualcommavbexploitpoc PoC for a Qualcomm ABL bootloader un...

Exploit for CVE-2026-34197

CVE-2026-34197 CVE-2026-34197 activemq PoC PoC for the Activ...

reverse_proxy_logger_xss

No d...