CVE-2025-32433

🚨 CVE-2025-32433: Неаутентифицированное удаленное выполнение кода в SSH-сервере Erlang/OTP Критическая уязвимость удаленного выполнения кода до аутентификации Серьезная ошибка во встроенном SSH-демоне Erlang/OTP позволяет неаутентифицированным удаленным злоумышленникам добиться полного удаленного...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-86224

A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 affects the mysqli_query function in /admin/modal_add_product.php , where manipulation of the fname argument allows a remote, unauthenticated attacker to inject SQL. The impact is rated HIGH (7.3) under CVSS 3.1...

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-72173

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

Janus-Vulnerability-CVE-2017-13156-Exploit

이 저장소에는 README가 없습니다...

CVE-2020-0096-strandhogg-exploit-p0c

이 저장소에는 README가 없습니다...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX 16 Endpoint Manager unauthenticated S...

exploitApache

exploitApache exploit для CVE-2021-41773:Path Traversal cgi-bin...

CVE-2025-68860

WordPress Mobile Builder = 1.4.2 - 인증 우회 CVE-2025-68860 설명 WordPress Mobile builder 플러그인 버전 1.4.2 이하는 인증 우회 취약점이 존재하며, 공격자는 기본 시크릿 "examplekey"로 유효한 JWT 토큰을 생성하여 관리자userid=1로 인증할 수 있습니다. 해당 토큰을 사용하여 공격자는 새로운 관리자 계정을 생성하고 사이트를 장악할 수 있습니다. 취약점 세부 정보 CVE: CVE-2025-68860 원인: JWT에 하드코딩된 시크릿 키...

CVE-2026-86223

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

CVE-2026-86222

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2022-42475-POC

CVE-2022-42475 背景 これは、以下のブログ記事のエクスプロイトです: https://bishopfox.com/blog/exploit-cve-2022-42475 編集済みバージョン このエクスプロイトのバージョンは、ハッカーであるあなたがROPガジェットなどに必要なメモリアドレスを提供しない限り動作しません。これらのデータを特定する作業はBishop Foxの機密かつ専有情報であり、私はこのエクスプロイトと共に公開しません（できません）。ご理解いただければ幸いです。 動作モード...

PoC-CVE-2025-55182

PoC: CVE-2026-33017 Уязвимость удалённого выполнения кода до аутентификации существует в версиях React Server Components 19.0.0, 19.1.0, 19.1.1 и 19.2.0, включая следующие пакеты: react-server-dom-parcel, react-server-dom-turbopack и react-server-dom-webpack. Уязвимый код небезопасно десериализуе...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – VX Search Enterprise リモートバッファオーバーフロー VX Search Enterprise 10.1.12 におけるリモートバッファオーバーフローの脆弱性。 脆弱性の詳細 CVE: CVE-2017-15220 製品: VX Search Enterprise バージョン: 10.1.12 影響: リモートコード実行 説明 VX Search Enterprise 10.1.12 は、特別に細工された HTTP POST リクエストによってトリガーされるバッファオーバーフローの影響を受けます。...

oracle-oam-authentication-bypas-exploit

Эксплойт обхода аутентификации Oracle Access Manager OAM Введение Использование уязвимости padding oracle в Oracle Access Manager OAM CVE-2018-2879 для обхода аутентификации и входа в любое веб-приложение, защищенное OAM, с использованием действительного имени пользователя. Этот эксплойт основан ...

CVE-2012-5519

cups-root-file-read.sh ⭐ bash로 구현된 metasploit 'cupsrootfileread.rb' 모듈로, 침투 테스트 및 CTF를 위해 설계되었습니다. 주로 짧은 bash 스크립팅 연습입니다. 리눅스 시스템에서 CVE-2012-5519를 익스플로잇하는 독립 실행형 프로그램입니다. 사용자에게 대화형 프롬프트를 제공하여 여러 제한된 파일을 빠르게 읽을 수 있습니다. 익스플로잇 - CVE-2012-5519 ❗ 이 스크립트는 CUPScommon UNIX printing system 1.6.2의 취약점을...

apache-struts-pwn_CVE-2017-9805

apache-struts-pwn - CVE-2017-9805 익스플로잇 Apache Struts CVE-2017-9805에 대한 익스플로잇 사용법 단일 URL에 대해 취약점 존재 여부 확인. python apache-struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' URL 목록에 대한 취약점 존재 여부 확인. python apache-struts-pwn.py --list 'urls.txt' 단일 URL 익스플로잇. python...

CVE-2021-31630-HTB

CVE-2021-31630 익스플로잇 Hack The Box의 WifineticTwo box에서 OpenPLC를 위한 CVE-2021-31630 익스플로잇 PoC, 이 스크립트는 CVE-2021-31630에 대한 Proof of Concept PoC 익스플로잇으로, Hack The Box 플랫폼의 WifineticTwo box에서 실행 중인 OpenPLC 서비스를 대상으로 합니다. 사용 방법 root@kitploit: python exploit.py -ip -p -u -pwd root@kitploit: python...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...