Joomla! Plugin Core Design Scriptegrator - Local File Inclusion

A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...

Joomla! Component ZiMBCore 0.1 - Local File Inclusion

A directory traversal vulnerability in the ZiMB Core aka ZiMBCore or comzimbcore component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id:...

Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion

A directory traversal vulnerability in the Dione Form Wizard aka FDione or comdioneformwizard component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-2045 info: name: Joomla! Component...

Joomla! Component JA Voice 2.0 - Local File Inclusion

A directory traversal vulnerability in the JA Voice comjavoice component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1982 info: name: Joomla! Component JA Voice 2.0 - Local File Inclusion author: daffainfo...

WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting

The settings page of the plugin did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue. id: CVE-2021-24286 info: name: WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting author: r3Y3r53 severity: medium descriptio...

Tree Page View Plugin < 1.6.7 - Cross-Site Scripting

The CMS Tree Page View plugin for WordPress has a Reflected Cross-Site Scripting vulnerability up to version 1.6.7. This is due to the posttype parameter not properly escaping user input. As a result, users with administrator privileges or higher can inject JavaScript code that will execute...

mooDating 1.2 - Cross-site scripting

A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is...

CVE-2020-14882

Oracle WebLogic 무인증 RCE 익스플로잇 이 PowerShell 스크립트는 CVE-2020-14882를 악용하여 다음 Oracle WebLogic Server 버전에서 인증 없이 원격 코드 실행을 수행합니다: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 사용법 .\exploit.ps1 -target 'https://target:7001' -command 'yourcommand' .\exploit.ps1 -target 'https://target:7001'...

D-Link DIR-600M - Authentication Bypass

D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices can be accessed directly without authentication and lead to disclosure of information about the WAN, which can then be leveraged by an attacker to modify the data fields of the page. id: CVE-2019-13101 info: name: D-Link DIR-600M - Authentication...

CVE-2022-24638

EXPLOITDB에서 확인됨: https://www.exploit-db.com/exploits/51026 이 버전은 위음성False Negative을 방지하기 위해 수정되었습니다. CVE-2022-24637 Open Web Analytics OWA 1.7.4의 인증되지 않은 원격 코드 실행RCE 익스플로잇입니다. 이 작업은 https://devel0pment.de/?p=2494를 기반으로 합니다. 면책 조항: 이 스크립트는 시스템 보안을 감사하기 위해 제작되었습니다. 이 스크립트는 본인의 시스템이나 명시적 허가를 받은 시스템에...

CVE-2014-0160-HeartBleed

이것은 exploitdb의 CVE-2014-0160 익스플로잇입니다. hackthebox에서 Valentine을 해결하는 동안 python3에서 작동하지 않아 필요한 변경을 수행했습니다. 저는 이 코드의 원저자가 아닙니다...

Apache Struts <2.3.1.1 - Remote Code Execution

Apache Struts before 2.3.1.1 is susceptible to remote code execution. When developer mode is used in the DebuggingInterceptor component, a remote attacker can execute arbitrary OGNL commands via unspecified vectors, which can allow for execution of malware, obtaining sensitive information,...

exploitdb-bin-sploits

새 저장소는 여기에서 찾을 수 있습니다: https://gitlab.com/exploit-database/exploitdb-bin-sploits...

CVE-2023-38890

CVE-2023-38890 – 온라인 쇼핑 포털 3.1 원격 코드 실행 분석 CVE-2023-38890 – ExploitDB 50029...

CVE-2025-69457

CVE-2025-69457 – Responsive Tourism Website 3.1 원격 코드 실행 RCE 인증되지 않음 WriteUp CVE-2025-69457 – ExploitDB 50049...

CVE-2025-69459

CVE-2025-69459 – Movie Rating System 1.0 손상된 접근 제어 관리자 계정 생성 인증되지 않은 WriteUp CVE-2025-69459 – ExploitDB 50621...

cve-2019-11043.py

cve-2019-11043.py ExploitDB PoC의 Python 포트입니다. ExploitDB 48182의 Python 포트 교육 목적으로만 사용 이 프로젝트는 익스플로잇 48182에 대한 ExploitDB PoC의 Python 포트입니다. 학습 및 연구 목적으로 만들어졌습니다. ⚠ 면책 조항 이 스크립트는 테스트되지 않았으므로 , 오류나 잘못된 로직이 포함될 수 있습니다. 이 코드는 로컬 테스트 머신과 같은 안전하고 통제된 환경에서만 사용하세요. 이 코드의 사용은 전적으로 본인의 책임 입니다. 소유하지 않았거나 명시적...

CVE-2025-69458

CVE-2025-69458 – 영화 평점 시스템 1.0 SQLi to RCE 인증 없음 WriteUp CVE-2025-69458 – ExploitDB 50622...

CVE-Lib

CVE-Lib — CVE + PoC Library 2026 Local, offline-searchable...

CVE-2025-67586

creationtimestamp| type| source ---|---|--- 2025-12-20 09:00:05+00:00| published-proof-of-concept| Telegram/IsgSMFcAG-ApRHDdzepdVGoV7GGJJ0rJ6FS3vxu8huYyqZo 2026-04-22 13:01:06+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mk3kjypomc27 2026-04-23 21:03:14+00:00| seen|...