CVE-2026-54161

CVE-2026-54161 PoC Summary upsmon interpolates the server-supplied, attacker-controllableups.alarm value, unsanitized, into a shell command that it runs via system. When a monitored device reports an ALARM state and the operator has configured NOTIFYCMD with EXEC on the ALARM event, an ups.alarm...

CVE-2024-29895

CVE-2024-29895 Cacti CVE-2024-29895 POC A command injection vulnerability allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. https://github.com/Cacti/cacti/security/advisories/GHSA-cr28-x256-xf5m Usage: app -m http://site.com/ -c...

opnsense-tunables-loader

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-tunables-loader opnsense-tunables-loader Class: Config line injection Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org System: Advanced: Tunables still interpolates name/value into /boot/loader.conf...

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC

🛡️ CVE-2026-57588 - Nessus SQL Injection Exploitation Framework 📋 Table of Contents Overview Vulnerability Details Features Installation Quick Start Usage Examples Payload Types Advanced Scenarios Reporting Troubleshooting Security Considerations License 🔍 Overview CVE-2026-57588 is a critical SQL...

CVE-2024-48990-PoC

This simple shell script should create all the required file for this vulnerability to work. First it creates a randomly generated temporary file that will be used to compile the fake init.so file When the vulnerability is triggered. This file will execute and copy the bash binary to /tmp/ribbit...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

halo-2.25.4-CVE-2026-67919

Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...

CVE-2023-25813

CVE-2023-25813 CVE-2023-25813 Vulnerability Reproduction - SQL Injection in Sequelize...

CVE-2024-38793-PoC

CVE-2024-38793-PoC Proof of Concept code for exploitation of CVE-2024-38793 Best Restaurant Menu by PriceListo = 1.4.1 - Authenticated Contributor+ SQL Injection. Proof Of Concept This is a proof of concept exploit for the vulnerability CVE-2024-38793, an SQL injection vulnerability for versions ...

CVE-2026-113391 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2026-113391

A command injection vulnerability exists in the Upload Endpoint of the DrayTek Vigor2960 (version 1.5.1.6 Revision 8218). The flaw is located within the uploadlangs function of the /cgi-bin/mainfunction.cgi file. This vulnerability allows for remote execution of commands. Although the product is ...

EUVD-2026-104990

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The attack can be executed remotely. The exploit has been disclose...

CVE-2019-15107_detection

CVE-2019-15107detection This script determinate if a server is running a vulnerable version of Webmin. Webmin =1.920 command injection - CVE-2019-15107...

CVE-2023-6000-POC

General Details CVE-ID : CVE-2023-6000 CVSS Score : 6.1 Type : Stored XSS Fixed Version : Popup Builder 4.2.3 This vulnerability allows an attacker to exploit a Cross-Site Scripting XSS flaw in the WordPress Popup Builder plugin. The plugin fails to prevent regular visitors from modifying existin...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 General Description This repository contains an educational demonstration of mitigation and detection for CVE-2026-72530 , a critical Code Injection and Sandbox Escape vulnerability in TrueConf Server. Vulnerability...

CVE-2020-7471

CVE-2020-7471 SQL injection via StringAgg delimeter input Setup: Run ./setup.sh for initial setup Open the docker image to initiate the database: docker exec -it containerid /bin/bash And run the following commands: python manage.py makemigrations vulapp python manage.py migrate Start the instanc...

CVE-2024-23346-rust-exploit

A Rust exploitation script for CVE-2024-23346. As shown below the POC uses the code injection vulnerability and runs remote shell commands like in a Terminal. poc.webm Steps to run the exploit: Run directly with Cargo cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin"...

CVE-2024-7854

CVE-2024-7854 Woo Inquiry = 0.1 - Unauthenticated SQL Injection Description: The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the...

cs4239-cve-2020-15873

CVE-2020-15873 Proof of Concept of CVE-2020-15873 - Blind SQL Injection in Librenms librenms librenms Development Debugging LibreNMS Docker Instance 1. Obtain a shell to the container: $ sudo docker exec -it librenmsvuln /bin/bash 2. To read the logs generated by LibreNMS: $ tail -f...