CSZ-CMS-Stored-XSS---Site-Settings

CSZ CMS Stored XSS v1.3.0 Author: Sergio Description: Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Site Settings Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2019-25024

CVE-2019-25024 OpenRepeater ORP / Unauthenticated Command Injection Advisories: MITRE CVE: https://vulners.com/cve/CVE-2019-25024 US NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-25024 Tenable: https://www.tenable.com/cve/CVE-2019-25024 VulDB: https://vuldb.com/?id.170172 Ubuntu:...

CVE-2022-37208

37208 CVE-2022-37208 Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

CVE-2026-108551

The openapi-typescript-codegen library, in versions through 0.31.0 , is vulnerable to a code injection flaw (CWE-94) triggered by the use of Handlebars templates. Attackers who control an OpenAPI document can inject arbitrary JavaScript by providing unescaped single quotes in specific fields, suc...

EUVD-2026-96346

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2025-28009

CVE-2025-28009 - SQL Injection in Dietiqa App v1.0.20 Discovered by: Saharuddin Azman Vendor: Appventure Sdn Bhd Product: Dietiqa App Version Affected: v1.0.20 CVE ID: CVE-2025-28009 Vulnerability Type: SQL Injection 📝 Description A SQL Injection vulnerability exists in the u parameter of the...

CVE-2024-10914

CVE-2024-10914 Command Injection Vulnerability Testing for D-Link NASManual testing with burpsuite Dork for Finding Vulnerable Devices Use the following search dork to find potentially vulnerable D-Link NAS devices: FOFA: app="DLink-DNS-ShareCenter" && server=="lighttpd/1.4.25-devel-fb150ff"...

CVE-2024-7094

CVE-2024-7094 CVE-2024-7094 Vulnerability checker Vulnerability type: PHP Code Injection...

cve-2020-7471-Time_Blind_SQLi-

This repository does not have a README...

CVE-2025-26159

CVE-2025-26159 This script may only be used in authorized environments where explicit permission has been granted. The author is not responsible for any misuse, damage, or consequences resulting from the use of this script. This script decodes, filters, and extracts cookies as part of the...

CVE-2021-36750

CVE-2021-36749 About - In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 3.3.7 - Unauthenticated SQL Injection Description The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.3.7 due to...

CVE-2022-36804-ReverseShell

Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

CVE-2026-94676

Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...

CVE-2026-108161

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...