274414 matches found
django-textedit
No d...
Exploit for CVE-2026-1731
CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scann...
Exploit for CVE-2025-6019
No d...
CVE-Asp.Net-Core-Inventory-Order-Management-System-Advisories
CVE-Asp.Net-Core-Inventory-Order-Management-System-Advisories...
Exploit
No d...
Xerte Online Toolkits Arbitrary File Upload - Upload Image
This module exploits the user template file import function's unrestricted file upload in versions 3.14 and earlier to upload and execute a shell. This targets editor/uploadImage.php. This has only been tested in implementations where the authentication type is "Db". OPSEC - if the user is logged...
SolarWinds Web Help Desk unauthenticated RCE
This module exploits an access control bypass vulnerability CVE-2025-40536 and an unsafe deserialization vulnerability CVE-2025-40551 to achieve unauthenticated RCE against a vulnerable SolarWinds Web Help Desk WHD server. Module Options msf use exploit/multi/http/solarwindswebhelpdeskrce msf...
Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Template Import
This module exploits an authentication bypass allowing arbitrary file upload in versions 3.14 and earlier to upload and execute a shell. Specifically, this targets /websitecode/php/import/import.php OPSEC This module results in directories being created and database entries which can not easily b...
Xerte Online Toolkits Arbitrary File Upload - Import Language
This module exploits an authentication bypass allowing arbitrary file upload in versions 3.14 and earlier to upload and execute a shell. Module Options msf use exploit/multi/http/xerteunauthenticatedimportlanguage msf exploitxerteunauthenticatedimportlanguage show targets ...targets... msf...
FreeBSD rtsold/rtsol DNSSL Command Injection
This module exploits a command injection vulnerability CVE-2025-14558 in FreeBSD's rtsol8 and rtsold8 programs. These programs do not validate the domain search list options provided in IPv6 Router Advertisement messages; the option body is passed to resolvconf8 unmodified. resolvconf8 is a shell...
CVE-Free-CRM-Advisories
CVE-Free-CRM-Advisories This repository contains Proof of Con...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Batch Detection Tool An efficient batch detect...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 - CosmicSting XXE Exploit !Python Versionht...
Basic-DOM-XSS-workflow
Basic-DOM-...
Djena_Bertrand
Description This the writeup on the challenges we solved duri...
CVE_Research
No d...
Exploit for CVE-2025-40552
CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre...
Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart
CVE-2024-48990 — needrestart Local Privilege Escalation Local...
cyart-vapt-week-2
cyart-vapt-team This repository contains the Week 2 VAPT lab w...
Exploit for Improper Privilege Management in Patriotmemory Viper_Rgb_Firmware
GenericDrv amigendrv64.sys - Proof of Concept Overview...