562105 matches found
CVE-2026-12260
The NetBoard CRM demo platform is vulnerable to a SQL injection flaw in the ‘user-name’ POST parameter of the ‘/module/auth/recovery.php’ endpoint. The vulnerability allows for blind attacks using Boolean, error, time-based, and UNION techniques. Successful exploitation enables an attacker to ext...
EUVD-2026-94803
SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...
cve-2024-48325
CVE-2024-48325 Description: An authenticated user can abuse SQL injection vulnerability exists in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicaoid parameter in /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid is not proper...
CVE-2025-14124
CVE-2025-14124 WordPress Team Plugin - Unauthenticated SQL Injection Author: Hyun Chiya Vulnerability Information Field| Value ---|--- CVE ID| CVE-2025-14124 Plugin| WordPress Team Plugin Affected Versions| esclike $this-s's' ; // ⚠️ esclike only escapes %, , \ $where .= "OR $wpdb-posts.posttitle...
CVE-2025-47916
CVE-2025-47916 - Invision Community Remote Code Execution RCE Vulnerability About This repository provides a proof‑of‑concept description for CVE‑2025‑47916 , a Remote Code Execution vulnerability affecting Invision Community versions 5.0.0 through 5.0.6. The issue stems from improper handling of...
CVE-2026-93699
An argument injection vulnerability in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. The root cause is identified as Improper Neutralization of Argument Delimiters in a Command (CWE-88) . The impact includes high severity for confidential...
EUVD-2026-94799
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...
CVE-2026-93699
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...
xwiki-cve-2025-24893-exploit
XWiki CVE-2025-24893 Exploit Unauthenticated Remote Code Execution exploit for XWiki versions vulnerable to CVE-2025-24893. Vulnerability Overview XWiki versions prior to 15.10.9 are vulnerable to unauthenticated RCE through Groovy script injection in the SolrSearch RSS feed handler. The...
cve-2026-3359-exp
CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42. In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv name of your enviroment here" or "venv...
n8n-cve-2025-68613
CVE-2025-68613 – n8n Expression Injection RCE Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform. This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow...
POC-GeoLeak-CVE-2026-52715
GeoLeak — PoC for CVE-2026-52715 Educational Proof of Concept for GeoLeak CVE-2026-52715, an unauthenticated SQL injection CVSS 9.3 in the GEO my WordPress = 4.5.5 plugin for WordPress. The swlatlng and nelatlng map boundary parameters are interpolated without sanitization into the WHERE clause...
Prompt Injection Bypass
PraisonAI is vulnerable to a Prompt Injection Bypass. The vulnerability is due to the block threshold defaulting to CRITICAL severity, which allows an attacker to submit instruction override or financial manipulation prompts that evade blocking, potentially enabling system prompt extraction and...
node-vulnerable
node-vulnerable This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately exploitable. EXPOSURE will report an exploitable verdict against it. Tracked CVEs: CVE-2018-21268 — traceroute command injection via the host argument. Exploitable in this baselin...
Exploit for OS Command Injection in Gnu Bash
Shellshock CVE-2014-6271 Vulhub's b...
WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Booklovers versions = 2.13.0...
WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Gutentype versions = 2.1.12...
WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Balance versions = 1.12.0...