280735 matches found
📄 ASUS Router Multi-Stage Command Injection
A multi‑stage command injection vulnerability allows an attacker to achieve remote command execution on a vulnerable ASUS router by abusing the SETROOTCERTIFICATE and APPLYAPP HTTP methods. In the first stage, a malicious shell script is uploaded to the target system disguised as a certificate fi...
📄 Vvveb CMS 1.0.5 Insecure Direct Object Reference
A one liner of details for how to leverage the insecure direct object reference vulnerability in Vvveb CMS version 1.0.5. The research later discovered this also affects version 1.0.7.3...
📄 Vite 6.2.2 Arbitrary File Read
Proof of concept exploit for an arbitrary file read in Vite version 6.2.2. ============================================================================================================================================= | Title : Vite 6.2.2 Arbitrary File Read – PHP Exploit | | Author : indoushka | ...
📄 Universal‑Ctags V Language 6.2.1 Parser Uncontrolled Recursion
A denial of service issue has been discovered in Universal‑Ctags versions 6.2.1 and below affecting the V language parser component. ============================================================================================================================================= | Title :...
📄 WatchGuard IKEv2 Detection Scanner
This Metasploit module checks for potential vulnerability to CVE-2022-23176 in WatchGuard Firmware IKEv2 service by analyzing malformed IKESAINIT responses. ============================================================================================================================================...
📄 VirtualBox 7.0.16 Local Privilege Escalation / Race Condition
VirtualBox version 7.0.16 proof of concept local privilege escalation exploit that leverages a race condition vulnerability. ============================================================================================================================================= | Title : VirtualBox 7.0.16...
📄 WBCE CMS 1.6.5 LFI / Config Disclosure / Cross Site Scripting
The WBCE CMS frontend loader includes template files without sanitization. This allows local file inclusion, reading configuration files, and persistent cross site scripting via crafted templates. Version 1.6.5 is affected...
📄 SPIP Saisies 5.11.0 Remote Code Execution
This Metasploit module exploits an unauthenticated PHP code injection in the SPIP Saisies plugin. The anciennesvaleurs form parameter is interpolated unsanitized into a hidden field rendered with interdirescripts=false, allowing direct PHP code execution via template eval. Exploitation requires a...
📄 Vivotek Camera Firmware OS 0125c Command Injection
Vivotek Camera Firmware OS versions 0100a through 0125c suffer from a command injection vulnerability. The issue resides in the CGI binary uploadmap.cgi, which operates under the Boa Webserver environment. The vulnerability occurs because the application improperly processes the POSTFILENAME...
Exploit for Use After Free in Redis
🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execu...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Answer
No d...
Exploit for Improper Privilege Management in Microsoft
CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...
Exploit for Deserialization of Untrusted Data in Google Android
🔥 ZygoteExploitDemo - CVE-2024-31317 Android Security Lab...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Flexense Vx_Search
No d...
Linux RC4 Encrypted Payload Generator
This evasion module packs Linux payloads using RC4 encryption and executes them from memory using memfdcreate for fileless execution. Linux kernel version support: 3.17+ Module Options msf use evasion/linux/x64/rc4packer msf evasionrc4packer show actions ...actions... msf evasionrc4packer set...
LeakIX Search
This module uses the LeakIX API to search for exposed services and data leaks. LeakIX is a search engine focused on indexing internet-exposed services and leaked credentials/databases. An API key is required free at https://leakix.net. Actions: SEARCH - Query LeakIX with a search string and scope...
web-vulnerability-scanner
Web Vulnerability Scanner This project is a simple Python too...
challenge-yourself-level-1
Attack Path Lab !GitHubhttps://img.shields.io/badge/GitHu...