CVE-2026-94031

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

EUVD-2025-37999

Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...

PT-2025-45222

Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...

CVE-2025-53246: Missing Authorization

Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...

GHSA-MQF3-QPC3-G26Q Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message

!IMPORTANT This vulnerability only affects sites which are in the "dev" environment mode. If your production website is in "dev" mode, it has been misconfigured, and you should immediately swap it to "live" mode. See https://docs.silverstripe.org/en/developerguides/debugging/environmenttypes/ for...

Apache Commons Text 1.9 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Commons Text RCE', 'Description' = %q This exploit takes advantage of the StringSubstitutor interpolator class, which is included in the...

in-passport.tecno.com Cross Site Scripting vulnerability OBB-3121078

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Apache / 2.4.49 CVE-2021-41773 exploit by G...

Malicious code in xss-test-gaurav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4856cf0b438d50d75a5861d08893b7b28643488276db12e9ba3e2d0bb6b1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7301 Malicious code in xss-test-gaurav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d4856cf0b438d50d75a5861d08893b7b28643488276db12e9ba3e2d0bb6b1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info...

Online Resort Management System 1.0 SQL Injection

Exploit Title: Online Resort Management System 1.0 - SQLi Authenticated Date: 15/01/2022 Exploit Author: Gaurav Grover Vendor Homepage: Software Link: Version: 1.0 Tested on: Linux and windows both Summary: There are a vulnerabilities in Online Resort Management System ORMS 1. The attacker can...

WordPress GTranslate plugin <= 2.8.51 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Gaurav in WordPress GTranslate plugin versions = 2.8.51. Solution Update the WordPress GTranslate plugin to the latest available version at least 2.8.52...

SolarWinds TFTP Server <= 9.2.0.111 - Remote DoS Exploit

No description provided by source. !/usr/bin/perl SolarWinds TFTP Server =9.2.0.111 Remote DoS Exploit by Gaurav Baruah TFTP Server Service stops after payload is sent, and has to be started again in Config Tested on XP SP3 Big thnx: dragunov Greetz: Sanjay use IO::Socket; $port = 69; $host =...

IBM Lotus QuickR qp2 ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Google Maps Cross Site Scripting

Google Maps XSS currently unpatched Discovered By - Pratul Agrawal [email protected] Gaurav Baruah [email protected] PoC -...

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service !/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5"...

SolarWinds TFTP Server <=9.2.0.111 Remote DoS Exploit

Exploit for unknown platform in category dos / poc ===================================================== SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5"...

Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)

!/usr/bin/perl Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcode"; close nzb; sleep 1; print "\nFile $file successfully created!\n"; milw0rm.com 2009-05-05...