480234 matches found
Starlink-FI
Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block...
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relationtypelist parameter of listsshow.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in rolelist and inject SQL through...
CVE-2026-82545
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...
CVE-2022-26134-POC
Description： This is a script tool that supports multi-threaded batch detection of Confluence OGNL injection vulnerability CVE-2022-26134 Usage: The file url.txt contains the target addresses Results: 1. Single target detection 2. Batch detection Successful detection will be highlighted in yellow...
CVE-2024-415770-ssrf-rce
CVE-2024-415770-SSRF-RCE Description This script is designed to interact with the teamserver. Update the script with your teamserver URL. It performs several steps to register an agent, open a socket, and inject an SSH key into the target's authorized keys. Prerequisites Python 3.x Required Pytho...
CVE-2024-0566
CVE-2024-0566 Smart Manager 8.27.0 - Post-Authenticated SQL Injection Exploit Title: Smart Manager 8.27.0 - Post-Authenticated SQL Injection Date: 2024-01-18 Exploit Author: Ivan Spiridonov - xbz0n Vendor Homepage: https://www.storeapps.org/ Software Link:...
CVE-2024-4577
Just for researching Poc For Default XAMPP root@kitploit: curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...
CVE-2026-9645-ScadaBR-Analysis
CVE-2026-9645 — ScadaBR Vulnerability Analysis Technical vulnerability analysis and CVE briefing for CVE-2026-9645 , affecting the open-source ScadaBR SCADA/HMI platform. Overview CVE-2026-9645 is a critical authenticated remote code execution vulnerability in ScadaBR. According to the prepared...
rails-PoC-CVE-2016-2098
Una prueba de concepto de la vulnerabilidad: CVE-2016-2098 Proyecto universitario creado por @alejandro-marting donde podemos comprobar la vulnerabilidad 2096 Usando: rails 4.2.5.1 la vista tiene un código vulnerable app/views/poc/render1.html.erb !...
D-Link-NAS-CVE-2024-10914-
D-Link-NAS-CVE-2024-10914- Este es un programa de detección de vulnerabilidades RCE de D-Link Resumen de la vulnerabilidad Los D-Link DNS-320 y otros son dispositivos NAS almacenamiento conectado a la red de la empresa china D-Link. Varios productos de D-Link presentan una vulnerabilidad de...
CVE-2022-37210
CVE-2022-37210 CVE-2022-37210 POC Descripción sugerida JFinal CMS 5.1.0 está afectado por: Inyección SQL. Estas interfaces no utilizan el mismo componente, ni tienen filtros, sino que cada una utiliza su propio método de concatenación SQL, resultando en inyección SQL. Información adicional...
CVE-2016-10993
CVE-2016-10993 Vulnerabilidad de WordPress - XSS Cross-Site Scripting Ubicación de la Vulnerabilidad https://themesinfo.com/scoreme-wordpress-theme-design-496 Prueba de Concepto PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Referencias...
CVE-2024-2387
CVE-2024-2387 Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms = 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integrationid Description The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets an...
CVE-2025-6018-6019
CVE-2025-6018 CVE-2025-6019 PoC Exploit Local Privilege Escalation LPE - openSUSE / SUSE Linux Enterprise 15 Working PoC/Exploit for CVE-2025-6018 and CVE-2025-6019 - Privilege escalation from unprivileged user to root on openSUSE Leap 15.x and SUSE Linux Enterprise 15.x 🎯 Quick Summary CVE ID|...
CVE-2023-43838
CVE-2023-43838 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. Additional Information 1. Create alert.svg with the following content: root@kitploit:...
CVE-2025-29927
🕷️ Next.js CVE-2025-29927 🧑🏻💼 Legal Disclaimer This project is a Next.js application that has been intentionally configured to be vulnerable to an Authorization Bypass in Next.js Middleware CVE-2025-29927. It is provided solely for lawful, educational, and research purposes. By accessing, using,...
CVE-2020-15052
CVE-2020-15052 : Artica Proxy before 4.28.030418 Community Edition allows SQL Injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000 active servers,...
CVE-2023-6000-POC
General Details CVE-ID : CVE-2023-6000 CVSS Score : 6.1 Type : Stored XSS Fixed Version : Popup Builder 4.2.3 This vulnerability allows an attacker to exploit a Cross-Site Scripting XSS flaw in the WordPress Popup Builder plugin. The plugin fails to prevent regular visitors from modifying existin...