Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF Denial of Service CVE-2025-41067 & CVE-2025-41068 This repository contains Proof-of-Concept PoC exploit scripts for two high-severity vulnerabilities discovered in NewPlane's Open5GS. These vulnerabilities can be triggered by an attacker to cause a Denial of Service DoS in the NRF...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

CVE-2022-22978-demo

CVE-2022-22978-demo CVE-2022-22978 vulnerability demo code Exploitation Conditions Although rated as high severity, the exploitation conditions are quite stringent. Personally, I find this vulnerability rather underwhelming. 1. First, spring-security must be within the affected scope. 2. Second, ...

CVE-2018-14667

CVE-2018-14667 Dopo aver trascorso molto tempo per comprendere e sfruttare correttamente questa CVE, ho deciso di creare un repository sul bug RCE di RichFaces 3.X e condividere i HOWTO passo dopo passo con la comunità. 0x00 : Introduzione al bug di RichFaces 3.X Lunedì 19 novembre, Joao F M...

cve-2025-50428

CVE-2025-50428 - Iniezione di Comandi in RaspAP Un proof-of-concept exploit per CVE-2025-50428, una vulnerabilità di iniezione di comandi in RaspAP raspap-webgui 3.2.9 e versioni precedenti...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Autore dell'exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Riferimenti: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injectio...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Autore dell'exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH Riferimenti: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-executio...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Exploit di Factory Reset Zigbee Light Link Codice del programma Simulazione Zigbee in Python root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def...

CVE-2025-26054

CVE-2025-26054 CVE-2025-26054 Autore: Rohan Deshpande Stored Cross Site Scripting Riepilogo Lo Stored XSS Cross-Site Scripting è una vulnerabilità di sicurezza che si verifica quando un attaccante inietta script dannosi in un'applicazione web, che vengono poi memorizzati sul server e serviti agli...

CVE-2024-4761

CVE-2024-4761 उच्च CVE-2024-4761 शोषण गूगल ने क्रोम ब्राउज़र में CVE-2024-4761 के रूप में ट्रैक की गई एक उच्च-गंभीरता वाली जीरो-डे भेद्यता को संबोधित करने के लिए आपातकालीन सुरक्षा अपडेट जारी किए हैं। यह भेद्यता Google वेब ब्राउज़र के V8 JavaScript इंजन में मौजूद एक आउट-ऑफ-बाउंड राइट समस्या है।...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Vulnerabilità di deserializzazione in Microsoft Office SharePoint 🚀 Panoramica Questo lab dimostra una vulnerabilità di deserializzazione in Microsoft Office SharePoint che consente l'esecuzione remota di codice RCE. Il problema deriva dalla gestione impropria di dati...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 è stato pubblicato ufficialmente da MITRE. Panoramica della Vulnerabilità...

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — STIG Manager OIDC 反射型 XSS PoC 针对 STIG Manager 1.5.10 至 1.6.7 版本中反射型跨站脚本（XSS）漏洞的概念性 PoC。 漏洞概述 STIG Manager Web 应用 OIDC 认证错误处理代码中存在一个反射型 XSS 漏洞。OIDC 提供商返回的 error 和 errordescription 查询参数通过 innerHTML 直接写入 DOM，未进行 HTML 转义。攻击者若能构造恶意 URL 并诱使用户点击，即可在应用上下文中执行任意 JavaScript。...

RabbitMQ Management - OAuth 2 Client Secret Disclosure

RabbitMQ 3.13.15, 4.0.20, 4.1.11, and 4.2.6 contains an information disclosure caused by the obsolete GET /api/auth endpoint exposing OAuth 2 client secrets when management.oauthclientsecret is configured, letting unauthenticated attackers access sensitive credentials, exploit requires management...

Netgear DGN2200 - Improper Authentication

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the requested url, it will be recognized as passing the authentication. id: CVE-2024-57046 info: name: Netgear DGN2200...

Rocket.Chat - Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. id: CVE-2024-39713 info: name: Rocket.Chat - Server-Side Request Forgery SSRF author: iamnoooob,rootxharsh,pdresearch severity: high description: | A Server-Side Request Forgery SSRF affects...

Breeze <= 2.4.4 - Arbitrary File Upload

Breeze Cache WordPress plugin = 2.4.4 contains an unrestricted file upload vulnerability caused by missing file type validation in 'fetchgravatarfromremote' function, letting unauthenticated attackers upload arbitrary files, exploit requires 'Host Files Locally - Gravatars' enabled. id:...

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...