29577 matches found
CVE-2021-40352
CVE-2021-40352 Opnemr Version 6.0.0 Has a security vulnerability where an attacker who has Physician Access can read messages with were sent to others members including admin messages the vulnerability exits in the print message feature = "pnotesprint.php?noteid=16" changing the "noteid=" to any...
datapower-redis-rce-exploit
datapower-redis-rce-exploit CVE-2020-5014 A POC for IBM DataPower Authenticated Redis RCE Exploit abusing the "Test Message" Function. Full explination and demo on Youtube Blog post on tomcope.com Explanation Using the DataPower "Send a Test Message" function available through a authenticated...
LibAFL
LibAFL, the fuzzer library Advanced Fuzzing Library - Slot your own fuzzers together and extend their features using Rust. LibAFL is a collection of reusable pieces of fuzzers, written in Rust, it gives you many of the benefits of an off-the-shelf fuzzer, while being completely customizable. Some...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
CVE-2026-80440 Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders
The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any...
CVE-2026-18042
The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allowing unauthenticated attackers to cancel the payment on any customer's booking...
CVE-2026-18042
WP Travel WordPress plugin versions before 12.0.2 fail to verify that the requester is authorized to act on the booking targeted by its front-end payment-message handlers. This missing authorization check allows unauthenticated attackers to cancel the payment on any customer's booking, resulting ...
Erlang-OTP-SSH-CVE-2025-32433
β Resultado El servidor respondiΓ³ a un ID de mensaje SSH 80 0x50 β que estΓ‘ reservado para post-autenticaciΓ³n. Esto demuestra que el servidor acepta mensajes invΓ‘lidos durante la fase de pre-autenticaciΓ³n, indicando un comportamiento vulnerable segΓΊn lo definido en CVE-2025-32433. π Resumen de la...
CVE-2026-8239
CVE-2026-8239 CVE-2026-8239 is an Insecure Direct Object Reference IDOR vulnerability affecting Concrete CMS 9.5.0 and earlier.The vulnerability exists in the /ccm/frontend/conversations/getrating endpoint, which allows an attacker to determine whether a conversation message exists and retrieve i...
CVE-2018-7747
CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...
Spring-Kafka-POC-CVE-2023-34040
Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. root@kitploit: docker-compose up Start up the Consumer application. root@kitploit: cd spring-kafka-consumer...
CVE-2026-87735
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...
pmkidcracker
Crackeador de PMKID WPA2 Este programa es una herramienta escrita en Python para recuperar la clave precompartida de una red WiFi WPA2 sin necesidad de desautenticaciΓ³n ni requerir que haya clientes en la red. Aprovecha la debilidad de ciertos puntos de acceso que anuncian el valor PMKID en el...
heartbleed
Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...
cve-2021-44228-log4shell_rce_reproduction
CVE-2021-44228 β Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...
CVE-2026-87735
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...
mallet
Mallet, a framework for creating proxies Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphic...
CVE-2026-53921-PoC-Exploit
CVE-2026-53921 β odhcpd Stack Overflow β οΈ For educational and authorized testing only. Unauthorized use is illegal. π Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrtβs odhcpd daemon β the default DHCPv6/DHCPv4/RA server. π How it works The vulnerability exists...
CVE-2018-10933
Authentication Bypass in Server Code CVE-2018-10933 Versions 0.7.6 to 0.8.4 Description libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the...
BinProxy
Overview BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem. Installation Prerequisites Ruby 2.3 or later A C compiler, Ruby headers, etc., are needed to compile several dependencies. On Ubuntu, sudo apt install build-essential ruby-dev...