cisco-CVE-2023-20198-tester

Cisco Tester: Vulnerability Detection Script Table of Contents Overview Features Prerequisites Installation Usage Output Contributing Overview The ciscotester.py script is designed to assess multiple IP addresses for a specific Cisco vulnerability CVE-2023-20198. It performs an HTTP or HTTPS POST...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Authenticated Author+ Stored Cross-Site Scripting Description The Easy Media Replace plugin is vulnerable to a Stored Cross-Site Scripting XSS via the media attachment title. When an Author renames a media file using an XSS payload and an Admin or Edito...

Disk-Spoofer

Disk-Spoofer Kernel driver based disk size and sector query spoofing program, can evade Windows WMIC query. Environmental dependence windows10 22H2 vs2019 Cheat off If can help you, please Star...

CVE-2026-37064

CVE-2026-37064 Enumeración de usuarios en /vfm-admin/ajax/usr-check.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enumerar los usuarios de la aplicación mediante el envío de una solicitud POST especialmente diseñada al endpoint afectado con un parámetro 'username'...

CVE-2025-25968

CVE-2025-25968: Vulnerabilidad de Control de Acceso Inadecuado en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 contiene una vulnerabilidad de control de acceso inadecuado. Un usuario con privilegios de editor puede acceder a información sensible, com...

sslscan v2.2.3

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

[SECURITY] Fedora 44 Update: stb-0^20260802.2c980bb-2.fc44

Single-file public domain libraries for C/C++...

[SECURITY] Fedora 43 Update: stb-0^20260802.2c980bb-2.fc43

Single-file public domain libraries for C/C++...

EUVD-2026-83453

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

EUVD-2026-83460

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

EUVD-2026-83448

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...

spybrowse

BrowseSpy Asegúrate de cambiar las variables ftp en todo el código; estas variables contienen el nombre de usuario, la contraseña y la dirección IP del servidor FTP que recibe los archivos. Este código hará lo siguiente: 1. Se copiará a sí mismo en el directorio %TMP% y se nombrará ursakta.exe 2...

through_the_wire

À travers le fil À travers le fil est une preuve de concept d'exploitation pour CVE-2022-26134, une injection OGNL affectant Atlassian Confluence Server et Data Center versions = 7.13.6 LTS et = 7.18.0 « Latest ». Il s'agissait à l'origine d'un zero-day exploité dans la nature. Avis du fournisseu...

[SECURITY] Fedora 45 Update: libheif-1.23.4-5.fc45

libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF AV1 Image File Format file format decoder and encoder...

[SECURITY] Fedora 45 Update: stb-0^20260802.2c980bb-2.fc45

Single-file public domain libraries for C/C++...

CVE-2026-77875

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2024-50508

CVE-2024-50508 Woocommerce Product Design = 1.0.0 - Descarga Arbitraria de Archivos No Autenticada Descripción El plugin Woocommerce Product Design para WordPress es vulnerable a Directory Traversal en todas las versiones hasta, e incluyendo, 1.0.0. Esto permite que atacantes no autenticados lean...

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 概念验证 POC 由 CRFSlick 提供，发现者 AkkuS 已在 CutePHP CuteNews 2.1.2 中发现一个问题。攻击者可通过个人资料区域的头像上传过程，利用 avatarfile 字段（指向 index.php?mod=main&opt=personal）渗入服务器。在 /core/modules/dashboard.php 中没有对 $imgsize 进行有效控制。可以更改文件头内容并绕过控制以执行代码。（攻击者可为此使用 GIF 头。） 用法 root@kitploit: Usage...

CVE-2024-57521-SQL-Injection-PoC

Authenticated SQL Injection in RuoYi v4.7.9 Bypass of CVE-2024-42900 Introduction I discovered a Blind SQL Injection vulnerability in the createTable feature of RuoYi Framework v4.7.9. This allows an authenticated administrator to execute arbitrary SQL commands via the sql parameter. This is a...