EUVD-2026-102844

Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/erupt. Attackers holding query permission on entities with String-keyed linkTre...

CVE-2026-111390

Erupt through version 2.3.0 is vulnerable to an HQL injection vulnerability in the Data Table API . The flaw exists because the linkTreeVal parameter in the POST /erupt-api/data/table/{erupt} endpoint fails to sanitize unescaped quotes. This allows authenticated users with query permissions on en...

cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 Description CVE-2025-66398 is a Signal K Server issue where an unauthenticated attacker can poison the server’s restore state via /skServer/validateBackup, then hijack config via /skServer/restore to inject a backdoor admin account and optionally achieve...

CVE-2026-48842

CVE-2026-48842 — Roundcube virtuserquery pre-auth SQLi Python 3 checker for CVE-2026-48842 in Roundcube Webmail optional virtuserquery plugin. PoCbit This PoC is listed on PoCbit — CVE-2026-48842 on pocbit.org. Running the PoC prints a PoCbit header; JSONL lines include pocbit / pocbitpage. |...

CVE-2026-22777

CVE-2026-22777 — ComfyUI-Manager CRLF Injection - RCE with CVE-2025-67303 Severity: Critical CVSS 9.8 Affected: ComfyUI-Manager Code Execution How It Works ComfyUI-Manager exposes a /api/manager/dbmode endpoint that accepts a value query parameter and writes it directly into config.ini using...

CVE-2025-58434-59528-htb-ctf

CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain This repository contains the complete exploitation chain for the Silentium machine on Hack The Box. The exploit leverages a two-stage vulnerability involving user enumeration and JavaScript injection to achieve Remote Code Execution RCE. 📝...

WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability

SQL Injection vulnerability discovered by DERISK in WordPress Plugin Support Genix versions = 1.4.54...

WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ayukiab in WordPress Plugin Strong Testimonials versions = 3.3.12...

WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by hinhlx in WordPress Plugin Conversational Forms for ChatBot versions = 1.5.1...

safetext

safetext This is not an officially supported Google product. Safe-by-construction libraries for producing formats like YAML, to replace syntax-unaware libraries like text/template and sprintf that are at risk of injection vulnerabilities. Example use-case Since text/template is not syntax-aware o...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzaku in WordPress Plugin Booktics versions = 1.0.29...

IPFire_2.19_RCE_Authenticated

IPFire 2.19 OINKCODE RCE PoC Python proof of concept for the authenticated command-injection vulnerability in IPFire 2.19's ids.cgi page through the OINKCODE parameter. For authorized security testing and training labs only. Run this PoC only against systems that you own or have explicit permissi...

WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability

Content Injection vulnerability discovered by changsheng in WordPress Plugin HivePress versions = 1.7.32...

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 fast try import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text or POST /wp-login.php HTTP/1.1 Host: 127.0.0.1:9000 Content-Typ...

Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT English | فارسی Persian ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI Argument Injection on Windows "WorstFit" Overview CVE-2024-4577 is a critical remote code execution vulnerability in PHP's CGI implementation on Windows. It bypasses the fix for the original CVE-2012-1823 by exploiting Windows "Best-Fit" code page conversion to smuggle...

POC-CVE-2026-65971

CVE-2026-65971 — SQL Injection in Livewire PowerGrid via sortDirection Proof-of-concept and full technical write-up for CVE-2026-65971 / GHSA-7fgc-3h6c-698r , an SQL injection in power-components/livewire-powergrid reachable through the public Livewire property sortDirection. | ---|--- CVE|...

CVE-2026-52614

CVE-2026-52614 - RuoYi v4.8.3 filterKeyword Bypass SQL Injection 中文 | English Authorization required / 仅限授权测试 This repository is intended for security research and authorized testing only. Do not use it against systems without explicit permission. 本仓库仅用于安全研究与已获明确授权的测试。请勿对未授权系统使用。 中文说明 漏洞简介 RuoYi...

metasploitable2-exploitation-metasploit

Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...