CVE-2023-50164

Exploit CVE-2023-50164 for HackTheBox Lab Description This exploit was developed specifically for the Strutted lab from HackTheBox , aiming to exploit the vulnerability CVE-2023-50164 in Apache Struts 2. The flaw allows path traversal through a fault in handling file upload parameters. The exploi...

CVE-2026-110458

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-34990

CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...

EUVD-2026-100892

The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attackers to include and read arbitrary local files, including the WordPress configuration file...

EUVD-2026-100893

The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the...

CVE-2026-107594 File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion

The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the...

CVE-2026-107508

The Ultimate Multisite WordPress plugin (versions before 2.17.2 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) vulnerability. The root cause is a failure to validate a user-supplied value used to select a file to include, specifically via the 'attributes' parameter . An attacker...

CVE-2026-107594

The File Upload to Order WordPress plugin, prior to version 1.1.4 , is vulnerable to unauthenticated arbitrary file deletion . The flaw occurs because the plugin fails to validate or confine a file path derived from attacker-controlled session data before performing a deletion action. Since this ...

CVE-2026-92390

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

CVE-2019-9766

CVE-2019-9766 Do my best About CVE Free MP3 CD Ripper It is a switcher between .mp3 files and other filetype converting a file. Bug According to the NVD we can find that, in the vision 2.6 there is a Stack-based Overflow in the Buffer Area. So we can create a Poc for it. Filetype changed to .mp3...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

CVE-2026-110458

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-110458

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

EUVD-2026-100837

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device...

CVE-2026-38526

CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Legal disclaimer : this code is provided for educational purposes and for authorized testing only CTF, bug bounty, private lab. The author is not responsible for any illegal use. Description Krayin CRM Webkul ≤ 2.2.x exposes the...

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE Vulnerability This repository details the CVE-2021-29447 vulnerability, a critical security flaw in WordPress that allowed for authenticated XML External Entity XXE attacks through the Media Library. It also provides an automatic script that demonstrate...

cve-2025-32434-poc

CVE-2025-32434 Description Technical Details The vulnerability entry point is load in torch/serialization.py when protection weightsonly is enabled: loading a tar file would call these functions in chain: 1. load: torch/serialization.py:1117 2. loadlegacy: torch/serialization.py:1376 to...

StealthCrypter

💀StealthCrypter💀 📜 Description StealthCrypter is a powerful and easy-to-use encryption tool that helps you protect your sensitive files and directories using AES-256 encryption. Whether you need to safeguard personal documents or secure confidential data, CryptShield ensures that your files remai...

CVE-2025-24071

CVE-2025-24071 — Windows File Explorer Spoofing / NTLM Hash Disclosure via .library-ms ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal...

CVE-2024-23897

CVE-2024-23897 Environment Setup 1. Install Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Download Jenkins WAR file wget https://get.jenkins.io/war/2.441/jenkins.war 3. Change default Java version - Select Java 11 sudo update-alternatives --config java 4. Verify version - Check...