The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests, allowing a malicious actor to perform unauthorized modifications to the server’s data.

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the FOQUZ platform, related to insufficient restrictions on authentication attempts, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FOQUZ platform is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...

CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

CVE-2023-23397

This repository does not have a README...

CVE-2025-56807

CVE-2025-56807 Description A Stored Cross Site Scripting XSS vulnerability was discovered in FairSketch RISE Ultimate Project Manager & CRM v3.9.4 in the File Manager functionality. The vulnerability lies in the title parameter that is submitted when creating new folders. Due to insufficient inpu...

whatsapp-census

Hey there! You are using WhatsApp This is the github repository for the extended version of the paper Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Abstract WhatsApp, with 3.5 billion active accounts as of early 2025, is the world's largest instan...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 は、TP-Link Tapo c200 IPカメラにおいてリモートコード実行を可能にするコマンドインジェクションの脆弱性です。デバイスの主要なバイナリの1つである uhttpd におけるユーザー入力のチェック不足により、1.1.16 Build 211209 Rel. 37726N より前のすべてのファームウェアバージョンに影響します。詳細な解説はこちらにあります。 エクスプロイト pwnTapo.py これは、CryptoParty Madrid 2022 で脆弱性を示すために作成された PoC の拡張版です。2つのモードがありま...

nat-tunnel

NAT Tunnel v0.01 If you have access to a server with public IP and unfiltered ports you can run NAT Tunnel NT server on the server, and NT client on your box behind NAT. the server requires 2 open ports: one for communication with the NT client --admin, the other for regular clients to connect to...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.4 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...

Travelpayouts <= 1.1.16 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 から 6.15 まで、リモートコード実行が可能です 認証されたリモートの低権限ユーザーが、実行可能なPHPファイルをアップロードし、システムコマンドを実行できます。 脆弱性はメッセージ機能にあり、送信されるファイル（例：shell.jpg.php.shell）の検証が不十分であることが原因です。 Windows Server 2019 x64 でテスト済み 使用方法: python CVE-2023-33253 -t 127.0.0.1 -u user -p user PoC:...

CVE-2025-27840

このリポジトリには README がありません。...

CVE-2025-26326

CVE-2025-26326 NVDA Remote および Tele NVDA Remote 接続アドオンにおける重大なセキュリティ脆弱性 この脆弱性は、CNA MITRE によって CVE-2025-26326 として記録されました。 この CVE/脆弱性は以下のグローバルデータベースに公開されています。 NVD, National Institute of Standards and Technology .gov Vulners.com tenable.com Debricked, Vulnerability database Vulmon Feedly VulDB fr Vul...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 この投稿の韓国語版はこちらでご覧いただけます : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR 第2世代ルーターの初期captive portalページに存在するCross-Site Scripting XSS脆弱性により、攻撃者がrouterとDishyを制御できる可能性があります。 基本 製品 : Starlink Router Gen 2 テスト済みバージョン : 2022.32.0...