CVE-2017-9805

CVE-2017-9805 CVE-2017-9805 POC The issue comes from a lack of filtering on the deserialization class used by the REST plugin. Struts uses Xstream with a lot of filtering for deserialization in multiple places, however this filtering was not in place for the REST plugin...

CVE-2022-30526

This repository does not have a README...

EUVD-2026-76779

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing...

CVE-2023-46747

This repository does not have a README...

CVE-2021-3360

This repository does not have a README...

CVE-2024-0509

This repository does not have a README...

CVE-2017-8481

This repository does not have a README...

CVE-2019-3396

This repository does not have a README...

CVE-2019-1253

This repository does not have a README...

CVE-2023-30185

This repository does not have a README...

CVE-2024-0762

This repository does not have a README...

cve-2023-31070

This repository does not have a README...

CVE-2013-0156

This repository does not have a README...

CVE-2022-35841

CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...

CVE-2015-3636

This repository does not have a README...

CVE-2024-24684

This repository does not have a README...

WINspect

This repository does not have a README...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Missing Authorization to Arbitrary Options Update Description The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized modification of data...

CVE-2020-0601

This repository does not have a README...

SAP_EEM_CVE-2020-6207

PoC for CVE-2020-6207 Missing Authentication Check in SAP Solution Manager This script allows to check and exploit missing authentication checks in SAP EEM servlet tcsmdagentapplicationeem that lead to RCE on SAP SMDAgents connected to SAP Solution Manager Original finding: Pablo Artuso Yvan 'igg...