280583 matches found
๐ pdf-image 2.0.0 Command Injection
pdf-image through version 2.0.0 allows OS command injection via the pdfFilePath argument. The package builds shell command strings with util.format and executes them with childprocess.exec. If an application passes an attacker-controlled file path into PDFImage, shell metacharacters in that path...
๐ thumbler 1.1.2 Command Injection
thumbler through version 1.1.2 allows OS command injection in thumbnail in lib/thumbler.js. The package concatenates the input, output, time, and size values into a single ffmpeg command string and executes that string with childprocess.exec. An attacker who controls one of those values can injec...
๐ OpenEMR 8.0.0.2 SQL Injection
OpenEMR versions prior to 8.0.0.3 contain a remote SQL injection vulnerability in the new search popup that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the new search popup functionality. CVE-2026-29187 - SQL Injection Vulnerabilit...
๐ OpenEMR 8.0.0.2 SQL Injection
OpenEMR version 8.0.0.2 contains a remote SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the patient selection feature. CVE-2026-33910 - SQL Injection Vulnerability in...
Humza-Ahmed-Week-5-Ethical-Hacking-Exploiting-Vulnerabilities
Humza-Ahmed-Week-5-Eth...
cross-site-scripting-lab
XSS Lab Documentation Overview What Is Cross-Site Scr...
Exploit for Race Condition in Openbsd Openssh
CVE-2018-15473 โ SSH Username Enumeration Tool A Python 3 r...
ESC/POS Printer Command Injector
This module exploits an unauthenticated ESC/POS command vulnerability in networked Epson-compatible printers. You can print a custom message, trigger the attached cash drawer, or cut the paper. Module Options msf use auxiliary/admin/printer/escpostcpcommandinjector msf...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 RSC lab intentionally vulnerable Local Doc...
darksword-kexploit
DarksSword Kernel Exploi...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 The principle is fairly simple: the -R option i...
Exploit for Improper Input Validation in Microsoft
HTB: Mailing โ A Complete Walkthrough By Mursalin --- I...
NightOwl
NightOwl Advanced Penetration Testing Framework A modula...
web-app-security-owasp-zap
๐ Web Application Security Testing with OWASP ZAP Author:...
Exploit for Path Traversal in Rarlab Winrar
POC f...
Exploit for CVE-2026-3584
CVE-2026-3584 รขโฌโ WordPress Kali Forms 10000 e 'PHP Version'...
Ja4Scanner
Ja4Scanner โ Bug Bounty Hunter's Toolkit A Python CLI tool fo...