540241 matches found
[R1] Nessus Version 10.12.5 Fixes Multiple Vulnerabilities
R1 Nessus Version 10.12.5 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 10/01/2026 - 14:31 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Issue| CVE ID | Severity | CVSS v3 Base/Temporal| CVSS v3 Vector...
halo-2.25.4-CVE-2026-67919
Authenticated Remote Code Execution RCE via Unvalidated Plugin URI Installation in Halo 2.25.4 1. Vulnerability Summary A critical security vulnerability has been identified in Halo version 2.25.4. The application provides an administrative endpoint to install or upgrade plugins from a remote URI...
CVE-2026-24061
GNU InetUtils telnetd Argument Injection Authentication Bypass CVE-2026-24061 In January 2026, the GNU telnetd service from GNU InetUtils was found to be vulnerable to authentication-bypass byKyu Neushwaistein aka Carlos Cortes Alvarez. Tracked as CVE-2026-24061, this flaw allows an attacker to...
CVE-2026-24061
Docker Telnet Auto-Login Lab A lightweight Docker lab for experimenting with Telnet protocol negotiation , explained in the CVE-2026-24061 exploit, which contains automatic username injection using the NEW-ENVIRON option. This project creates an isolated clientβserver environment to study how...
CVE-2024-40111-Exploit
CVE-2024-40111: Stored Cross-Site Scripting XSS in Automad 2.0.0-alpha.4 Exploit Details Exploit Title : Stored Cross-Site Scripting XSS in Automad 2.0.0-alpha.4 Date : 2024-06-20 Exploit Author : Jerry Thomas w3bn00b3r Vendor Homepage : Automad Software Link : Automad GitHub Repository Category ...
CVE-2026-73570
CVE-2026-73570 PoC - SMTP Command Injection Tester A custom, low-level Python proof-of-concept PoC script for testing SMTP command injection vulnerabilities CVE-2026-73570. This tool sends a malformed RCPT TO address containing shell-style command substitution e.g., $command to determine if the...
log4shell
Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...
CVE-2025-1338
CVE-2025-1338 This repository contains a proof-of-concept exploit script for CVE-2025-1338 1.Introduction to NUUO-Camera NUUO camera is a network video recorder NVR produced by NUUO Company in Taiwan Province, China. It is widely used in many fields such as retail, transportation, education,...
CVE-2024-36840-Exploit
CVE-2024-36840: SQL Injection Vulnerability in Boelter Blue System Management Version 1.3 Exploit Details Exploit Title : SQL Injection Vulnerability in Boelter Blue System Management version 1.3 Original Google Dork : inurl:"Powered by Boelter Blue" didn't workedzero url in search Google Dork By...
CVE-2026-1492
CVE-2026-1492 - WordPress User Registration Plugin Privilege Escalation Exploit Description This repository contains a proof-of-concept exploit for CVE-2026-1492 , a critical vulnerability affecting the WordPress User Registration & Membership plugin. The vulnerability allows unauthenticated...
cve-2025-59489
Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...
CVE-2021-44529
CVE-2021-44529 A code injection vulnerability in CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA allows unauthenticated users to execute arbitrary code with limited privileges nobody...
composer-CVE-2026-40261-CVE-2026-40176-PoC
!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FOR VULNERABILITIES CVE-2026-40261 AND CVE-2026-40176 IN COMPOSER. !CAUTION THE CODE IS INTENDED FOR EDUCATIONAL AND TESTING PURPOSES ONLY. !CAUTION DO NOT USE THIS CODE IN PRODUCTION ENVIRONMENTS OR AGAINST SYSTEMS WITHOUT PROPER...
CVE-2025-61455
π‘οΈ CVE Disclosure: CVE-2025-61455 β SQL Injection in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61455 Severity: CRITICAL CVSS 9.8 𧩠Summary A critical SQL Injection vulnerability exists in E-commerce Project v1.0, specifically within the signup.inc.php endpoint. The...
CVE-2026-1312
CVE-2026-1312 is a high-severity Django SQL injection vulnerability: when a column alias containing a dot is used in QuerySet.orderby, combined with FilteredRelation dynamically constructing queries via dictionary expansion, an attacker may be able to inject malicious SQL Affected versions:...
CVE-2026-1207
CVE-2026-1207 Django GIS RasterField SQL Injection Vulnerability Reproduction Vulnerability Overview Vulnerability Type : SQL Injection Affected Component : django.contrib.gis RasterField When querying with Django GIS's RasterField, the band parameter is directly concatenated into the SQL...
audit-axios
audit-axios Scan local repos for vulnerable axios versions and patch interactively. Targets CVE-2026-40175 β CRLF Header Injection leading to Request Smuggling & SSRF. CVSS 9.9, affects all axios 1.15.0. Quick Start npx audit-axios /Workspace /Projects Usage Interactive β checkbox select + bulk...
CVE-2025-56799
CVE-2025-56799 OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
CVE-2026-22038
CVE-2026-22038 β AutoGPT Stagehand Blocks Log API Keys in Plaintext CVE ID: CVE-2026-22038 Product: AutoGPT Platform Stagehand integration Affected Versions: All versions up to and including autogpt-platform-beta-v0.6.45 Patched In: autogpt-platform-beta-v0.6.46 Vulnerability Type: CWE-532 β...