CVE-2023-49496_PoC

CVE-2023-49496PoC Description UCServer is an advanced converged communication server. Shanghai Shupin Information Technology Co., Ltd. UCServer has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive database information. POC POST /login/wwxcorpInfo/ HTTP/1...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

CVE-2026-107634

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in getdataset and getnextdatum that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted,...

EUVD-2026-95021

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in getdataset and getnextdatum that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted,...

EUVD-2026-95015

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105828

Parse Server versions 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 are vulnerable to an information disclosure vulnerability via GraphQL errors. Even when public introspection is disabled, unauthenticated attackers possessing a public Application Id can send crafted operations to trigger ...

CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105823

The ImageMagick library is vulnerable in versions before 6.9.13-56 and 7.x before 7.1.2-31 due to a missing security-policy check in the CUT encoder . An attacker can supply specially crafted input to bypass configured security policies, which may result in the disclosure of sensitive information...

CVE-2024-24919

CVE-2024-24919 Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs This tool creates an output folder containing a "Target-IP.txt" file. This file includes the contents of the /etc/passwd file from the affected target, thereby determining if the system is vulnerable ...

CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit

CVE-2025-12139: Integrate Google Drive WordPress Plugin - Information Disclosure Exploit Description This is a Golang Proof of Concept PoC exploit for CVE-2025-12139. The vulnerability exists in the Integrate Google Drive plugin versions = 1.5.3 for WordPress. It allows unauthenticated attackers ...

CVE-2022-44268

CVE-2022-44268 ImageMagick 7.1.0-49 vulnerable to Information Disclosure Usage exploit.sh sh exploit.sh Output image is stored in output.png getdata.sh sh getdata.sh Source https://www.metabaseq.com/threat/imagemagick-zero-days/...

CVE-2026-14273

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

EUVD-2026-94999

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - Functional PoC MongoDB Memory Leak Exploitation - Simulated R6 Attack Complete Proof of Concept for CVE-2025-14847 MongoBleed Tested: ✅ MongoDB 7.0.5 | 14,300+ Successful Exploits | 4 Leaked UUIDs 🎯 About the Project This repository contains a fully functional Proof of...

CVE-2026-14508

The IBM DataPower Gateway is vulnerable to a use-after-free condition (CWE-416) that could allow a remote attacker to cause a denial of service and obtain sensitive information . Affected versions include 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 ...

EUVD-2026-94994

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...

CVE-2026-14508 IBM DataPower Gateway Use After Free

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...