278070 matches found
Exploit for CVE-2026-14840
CVE-2026-14840 — YOP Poll Vote recorded successfully. 2 403...
Tenable Security Center Report Charting RCE
Tenable Security Center prior to 6.9.0 allows an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. A report definition's inline style is discarded at render components rehydrate styles from the Style tables by styleID, so th...
Webmin Help Template Authenticated Remote Code Execution
Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...
...[ More ]
n8n versions through 2.31.4 and version 2.32.0 contain an authentication bypass vulnerability in Token-Exchange embed login that can allow an attacker possessing a private key trusted by the target configuration to assume an existing user's account. The vulnerable email fallback path trusts an...
Tenable Security Center SCAP Audit File Command Injection
Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...
Online Food Ordering System 1.0 Shell Upload
Online Food Ordering System version 1.0 suffers from a remote shell upload vulnerability. The upload endpoint /web/admin/updatefood.php accepts files with any extension, including .php, and stores them in the web-accessible directory without renaming or sanitizing the filename. Titles:...
hyperlight-overlaybd-poc
hyperlight-overlaybd-poc Can the output of a sandboxed job...
Exploit for SQL Injection in Dovecot
CVE-2026-24031: Dovecot SQL authentication bypass authenticat...
Exploit for Improper Input Validation in Boa
\ CVE-2009-4496 — Defensive Vulnerability Analysis \ Overv...
cyberange
大家好，我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场，包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含：邻里圈靶场16+隐藏漏洞，含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本，以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2026-54984 Windows ICC file parsing out-of-bounds write...
OWASP-Bypass-Docs
📘 OWASP Bypass — Documentação Técnica Documentação oficia...
Kioptrix-Lvl1-Exploitation
No d...
securefix
SecureFix Six real web vulnerabilities, each taken all the...
vpulse
VPulse Automated web security audit toolkit with screenshot...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
cve-2026-39987 Installation • Usage • Examples I...
Exploit for CVE-2026-41452
CVE-2026-41452 — Krayin CRM Installer Auth Bypass → Admin Take...
Exploit for CVE-2026-73034
CVE-2026-73034 — DB-GPT v0.8.1 Unauthenticated Path Traversal...