CVE-2025-24071-PoC

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Proof of Concept Overview CVE-2025-24071 is a spoofing vulnerability in Windows File Explorer that allows an unauthenticated attacker to expose sensitive information over a network. The vulnerability arises due to the implicit trust an...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code Execution RCE and file Read Exploit tool for CVE-2024-9264, a critical vulnerability in Grafana allow authenticated attcker to execute sql query leading to RCE 🛡️ This tool is strictly for educational purposes and authorized penetratio...

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

DiscoRape

DiscoRape DiscoRape is a selfbot for Discord written in python3.8 The original repository I forked this from can be found here made by EC-discord Preview 📝 Install/Run pip3 install -r requirements.txt Add your token in data/config.json run by doing python3 selfbot.py or you can Support/Contributi...

CVE-2021-42013

CVE-2021-42013 Poc CVE-2021-42013 - Apache 2.4.50 without CGI enable Usage : chmod -x CVE-2021-42013.sh ./CVE-2021-42013.sh http://ip:port/ /etc/passwd References https://nvd.nist.gov/vuln/detail/CVE-2021-42013 https://vulners.com/cve/CVE-2021-42013...

CVE-2020-10560-Key-Recovery

CVE-2020-10560 Key Recovery AES This PoC recovers the sitekey for OSSN 5.3 and above. For more information see http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read...

lnkbomb

Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather...

EUVD-2026-103469

Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into...

CVE-2026-112016

Netcore NR256CN through 1.5.140116 is vulnerable to an unauthenticated file write vulnerability within the Boa-derived /bin/boa web server . A remote attacker can exploit this by sending a POST request to a non-existent .cgi pathname. This action allows the attacker to write controlled content in...

CVE-2026-112016 Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files

Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into...

CVE-2026-112015 Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting osenv.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only...

CVE-2026-112015 Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting osenv.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only...

CVE-2026-112015

Omnigent versions 0.3.0 before 0.14.0 are vulnerable to a path traversal vulnerability (CWE-22). The flaw exists because authenticated users can escape the workspace by setting os_env.cwd on nested sub-agents. By uploading a bundle whose sub-agent specifies an absolute or parent-traversing workin...

EUVD-2026-103466

libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the...

CVE-2026-112013

The libtta library (through version 2.3 ) contains a divide-by-zero vulnerability within the tta_decoder_init_get_info() function. An attacker can cause an application to crash by providing a .tta file with an unvalidated zero sample rate and a recomputed header CRC32 . This trigger causes a SIGF...

CVE-2026-112013 libtta through 2.3 Divide by Zero via tta_decoder_init_get_info

libtta through 2.3 contains a divide-by-zero vulnerability in ttadecoderinitgetinfo that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the...

CVE-2026-112010

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...

CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use readtext, readblob, COPY ... ...

CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use readtext, readblob, COPY ... ...

CVE-2026-112005

WhoDB versions 0.104.0 before 0.135.0 are vulnerable to a path traversal flaw within the DuckDB query editor . This vulnerability allows remote attackers to execute DuckDB filesystem functions, enabling them to read and write arbitrary host files . Specifically, attackers can access the session.k...