EulerOS 2.0 SP11 : curl (EulerOS-SA-2026-4311)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS...

Medium: oci-add-hooks

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

CVE-2024-23897

Read first 3 lines of any file with read permission for current user on the system. The script is using proxychains internally. Usage: python CVE-2024-23897.py Example: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/ /var/lib/jenkins/secrets/master.key...

longtongue

Generar lista personalizada de contraseñas/frases basada en información del objetivo Codificado con 💙 por edoardottt ¡Compartir en Twitter! Instalación ⬇️ pipx pipx install longtongue Código fuente git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt...

CVE-2024-12542

CVE-2024-12542 linkID = 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure Description The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and...

CVE-2026-33146

CVE-2026-33146 A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages hidden from public share viewers could still leak through public share search results. Intro I found this issue while reviewing Docmost , an open-source...

amass

Proyecto OWASP Amass El Proyecto OWASP Amass realiza mapeo de redes de superficies de ataque y descubrimiento de activos externos utilizando técnicas de recopilación de información de fuentes abiertas y reconocimiento activo. Instalación Puedes encontrar instrucciones adicionales de instalación y...

CVE-2023-23752

This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...

Exploit-for-CVE-2024-46987

Exploit-for-CVE-2024-46987 Exploit for CVE-2024-46987 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --file FILE Vulnerability Description Camaleon CMS is a content management system built on Ruby on Rails. A path traversal vulnerability in the MediaController...

CVE-2026-9830

CVE-2026-9830 BookingPress Pro API Assessment PoC This repository contains a Python proof of concept for validating a reported unauthenticated BookingPress Pro REST API exposure. A successful response may contain booking and customer information, which can include personal data. Authorization...

CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

CVE-2020-19360

Fhem FileLoglogWrapper Arbitrary File Read Vulnerability CVE-2020-19360 Vulnerability Description FHEM version 6.0 contains a file inclusion vulnerability originating from the FHEM/FileLoglogWrapper file parameter allowing attackers to include files, which can lead to sensitive information...

anviz-m3-rfid-cve-2019-11523-poc

Anviz M3 RFID Access Control security issues Security issues have been found in the Anviz M3 RFID Access Control device when working in standalone mode connected to a TCP/IP network, that could lead to access control bypass and private informations leakage and alteration. Advisory information...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 python3 exploit.py -t...

CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC El complemento InfiniteWP Client para WordPress, en versiones hasta la 1.11.1 inclusive, es vulnerable a una falla de Exposición de Información Sensible. Esta vulnerabilidad permite a atacantes autenticados con permisos de nivel de suscriptor o superior extraer dat...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2022-25584

Flexwatch Flexwatch-CVE This document is for CVE-2022-25584 "RESERVED" https://vulners.com/cve/CVE-2022-25584 This vulnerability has been indexed by CNVD, but has not yet been made public CNVD ID:CNVD-2021-103443 Vulnerability to reproduce: We found that the FlexWATCH FW3170-PS-E Network Video...

CVE-2025-14847

🚨 CVE-2025-14847 — “MongoBleed” A high-severity unauthenticated memory disclosure vulnerability 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Real-World Impact Exploitation Summary Detection Guidance Remediation Mitigation Temporary Security Checklist Summary 🔎...

graphql-cop

GraphQL Cop - Utilidad de Auditoría de Seguridad para GraphQL Acerca de GraphQL Cop es una pequeña utilidad de Python para ejecutar pruebas de seguridad comunes contra APIs de GraphQL. GraphQL Cop es perfecto para ejecutar verificaciones CI/CD en GraphQL. Es ligero y cubre problemas de seguridad...

CVE-2024-23897

CVE-2024-23897 Jenkins Arbitrary File Leak Vulnerability CVE-2024-23897 !CAUTION ⚠️ Disclaimer: IMPORTANT: This script is provided for educational, ethical testing, and lawful use ONLY. Do not use it on any system or network without explicit permission. Unauthorized access to computer systems and...