279003 matches found
📄 UltimatePOS 4.8 Cross Site Scripting
The administrative panel in UltimatePOS version 4.8 suffers from a persistent cross site scripting vulnerability. CVE-2025-60503 — Stored Cross-Site Scripting XSS in UltimatePOS UltimateFosters v4.8 Publication date: 2025-10-30 CVE ID: CVE-2025-60503 RESERVED Researcher: Vivien Lebas Vendor:...
MindsDB 25.9.1.1 - Path Traversal
Exploit Title: MindsDB 25.9.1.1 - Path Traversal Date: 06-03-2026 Exploit Author: Lohitya Pushkar thewhiteh4t Vendor Homepage: https://mindsdb.com/ Software Link: https://github.com/mindsdb/mindsdb Version: not installed handlers BANNER = """ ------------------------------------- --- CVE-2026-274...
Linux nf_tables 6.19.3 - Local Privilege Escalation
Exploit Title: Linux Kernel 3.16 – 6.19.3 nftables RCU UAF LPE CVE: CVE-2026-23231 Date: 2026-03-19 Exploit Author: Aviral Srivastava Vendor: Linux Kernel kernel.org Affected: 3.16 – 6.19.3 Fixed in: 6.1.165, 6.6.128, 6.12.75, 6.18.14, 6.19.4 commit 71e99ee20fc3f662555118cf1159443250647533 Tested...
Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)
Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking CSWSH Date: 2026-02-26 Exploit Author: Hazar Taspinar Vendor Homepage: https://www.traccar.org/ Software Link: https://github.com/traccar/traccar Version: = 6.11.1 Tested on: Windows 11 / Linux CVE: CVE-2025-68930...
Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow (RCE)
Exploit Title: Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow RCE Date: 2026-15-03 Exploit Author: JarrettgxzSec Vendor Homepage: www.linksys.com Version: FW " printf"! Example: python3 sys.argv0 192.168.1.100 192.168.1.1\n" sys.exit1 TARGETIP = sys.argv2 TARGETPORT = 80 ATTACKERIP =...
Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation
Exploit Title: Linux Kernel procreaddirde 6.18-rc5 - Local Privilege Escalation CVE: CVE-2025-40271 Date: 2026-03-19 Exploit Author: Aviral Srivastava Vendor: Linux Kernel kernel.org Affected: 3.14+ through 6.18-rc5 bug predates version tracking Fixed in stable: 5.10.247, 6.1.159, 6.12.73, 6.18-r...
pentest-automation-framework
pentest-automation-framework Built this to speed up structure...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
copyfail-check Shell scripts to detect Linux kernel vulnera...
Exploit for CVE-2026-40776
CVE-2026-40776 — Eventin wp-event-solution Broken Access Con...
Exploit for CVE-2026-36356
CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Unauthentica...
dvwa-xss
Cross-Site Scripting XSS Attack & Analysis — DVWA A hands-o...
websec-sql-injection
WebSec SQL Injection Учебный backend-проект по безопасности в...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CopyFail Guard text...
Exploit for Server-Side Request Forgery in Vllm
No d...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 CVE...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
🚨 CVE-2026-31431: Copy Fail Un fallo crítico de 9 años en...
linux-copy-fail-exploit
CVE-2026-31431 Copy Fail - LPE Exploit PoC !Pythonhttps:...