280587 matches found
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Vulnetix Claude Code Plugin Vulnerability intelligence for Cl...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell-PoC-C...
Exploit for Race Condition in Canonical Ubuntu_Linux
ls Privilege Escalation using the Dirty Cow Kernel Exploit...
Exploit for CVE-2026-29000
CVE-2026-29000-pac4j-jwt-auth-byp...
📄 Payara Server Cross Site Scripting
Research details on exploitation for a cross site scripting vulnerability in Payara's administration REST interface. Versions below 4.1.2.191.54, 5.83.0, 6.34.0, and 7.2026.1 are affected. XSS to Admin account takeover CVE-2025-14340 A Cross-Site Scripting vulnerability in Payara’s Administration...
📄 esiclivre 0.2.2 SQL Injection
esiclivre versions 0.2.2 and below suffer from a remote SQL injection vulnerability. CVE-2026-30655 — SQL Injection in esiclivre password reset Summary A SQL injection vulnerability exists in the password reset endpoint of esiclivre. An unauthenticated attacker can inject SQL via the cpfcnpj POST...
📄 MCPJam Inspector 1.4.2 Remote Code Execution
MCPJam Inspector versions 1.4.2 and below proof of concept remote code execution exploit. !/usr/bin/env python3 CVE-2026-23744.py for testing only import requests import argparse import json import sys import urllib3 urllib3.disablewarningsurllib3.exceptions.InsecureRequestWarning def main: parse...
📄 activitypub-federation-rust 0.7.1 Server-Side Request Forgery
activitypub-federation-rust versions 0.7.1 and below suffer from a server-side request forgery vulnerability. CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4isinvalid CVSS 6.5 Moderate Keywords: SSRF, 0.0.0.0, IP validation bypass, activitypub-federation, Lemmy, Rust,...
📄 ddev/ddev ZipSlip Path Traversal
A ZipSlip path traversal vulnerability exists in ddev/ddev, a popular open-source local development tool for PHP, Python, and Node.js projects. Both the Untar and Unzip functions in pkg/archive/archive.go use filepath.Joindest, file.Name without any path containment validation, allowing a crafted...
Reconx
🔍 reconx - Modular Penetration Testing Framework !Python 3...
Classic-Heap-Attacks-POCs-Windows-10
Pruebas de concepto contra el heap de Windows En este reposit...
Exploit for CVE-2024-2473
CVE-2024-2473 — WPS Hide Login Page Identifier A profession...
Exploit for CVE-2025-52204
CVE-2025-52204 – Reflected XSS / HTML Injection in Znuny cust...
TGT2Admin-
🎭 RBCDExploit - Resource-Based Constrained Delegation Attack...
Exploit for OS Command Injection in Arcane
CVE-2026-23520 MCP API Remote Command Execution RCE Proo...
Exploit for CVE-2024-51346
CVE-2024-51346: Cryptographic Bypass and Media Decryption in E...
Exploit for CVE-2024-51347
CVE-2024-51347: Unauthenticated Remote Code Execution in LSC I...