280231 matches found
Exploit for CVE-2026-40271
Lazarus Group: 19-Day A/B Test Campaign Analysis TLP:CLEA...
Exploit for CVE-2026-4747
...
Exploit for OS Command Injection in Gnu Bash
...
Exploit for Type Confusion in Mozilla Firefox
No d...
Exploit for Type Confusion in Mozilla Firefox
No d...
📄 UNI-PASS-Based Customs Systems Insecure Direct Object Reference
A critical security vulnerability has been identified in customs platforms based on UNI-PASS, where a publicly exposed API endpoint allows unauthorized access to sensitive documents without proper authentication or authorization checks. The affected endpoint commonly structured under /api/public/...
📄 Vaadin 25.x Authentication Bypass
An authentication bypass affects Vaadin versions 6.8.13, 14.x, 23.x, 24.x, and 25.x when used with Spring Security, due to inconsistent path pattern matching on reserved framework routes. Accessing the /VAADIN endpoint without a trailing slash can bypass security filters, allowing unauthenticated...
📄 Spectrum ANOG Device Credential Extraction / Command Injection
This Metasploit auxiliary module targets Spectrum/ANOG devices and combines credential extraction, password decryption, and remote command execution through an authenticated command injection flaw...
ZSH 5.9 - RCE
Exploit ZSH 5.9 - RCE Date: 30-12-2025 Exploit Author: sinanadilrana import pexpect import sys import time def debugprintmsg: printf"DEBUG msg" def returntogdbgdb, maxattempts=3, timeout=3: """More reliable function to return to GDB prompt""" debugprint"Attempting to return to GDB..." for attempt...
RomM 4.4.0 - XSS_CSRF Chain
Exploit Title: RomM Application tab or Storage on Firefox Cookies - Copy the rommcsrftoken cookie value 3. Replace below with your token 4. Replace with the target RomM instance URL e.g., http://romm.local 5. Save this file as avatar.html 6. Upload it as your profile avatar...
Jumbo Website Manager - Remote Code Execution
Exploit Title: Jumbo Website Manager - Remote Code Execution Application: Jumbo Website Manager Version: v1.3.7 Bugs: RCE Technology: PHP Vendor URL: https://sourceforge.net/projects/jumbo/ Software Link: https://sourceforge.net/projects/jumbo/ Date of found: 28.10.2025 Author: Mirabbas Ağalarov...
React Server 19.2.0 - Remote Code Execution
Exploit Title: React Server 19.2.0 - Remote Code Execution Date: 2025-12-05 Exploit Author: EynaExp https://github.com/EynaExp Vendor Homepage: https://react.dev Software Link: https://react.dev/reference/rsc/server-components Version: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Tested on: Windows,Linux CVE :...
📄 Microsoft Malware Protection Engine Type Confusion
Microsoft Malware Protection Engine type confusion vulnerability proof of concept exploit for an older vulnerability from 2017. ================================================================================================================================== | Title : Microsoft Malware Protection...
pentestfr
Pentest Framework — Kali Linux / VirtualBox Framework Python...
Exploit for OS Command Injection in Webmin
CVE-2019-15107 - Webmin Unauthenticated RCE Description T...
sqlmap-gui
SQLMAP GUI — Manual de Usuario Versión: 1.0.0 Platafo...
Exploit for CVE-2026-34197
CVE-2026-34197 — Apache ActiveMQ RCE vía Jolokia API Descr...
Exploit for CVE-2026-23398
cve-2026-...