CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: - scripts and modules on the SheetJS CDN through version 0.19.2 2 - modules published with th...

CVE-2022-34963

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Vulnerability Explanation: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the News Feed module. Attack Vectors: The attacker must post something on the...

CVE-2021-41773

CVE-2021-41773 Reproduction https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited v2.4.49 Apache unique vulnerability, earlier versions do not have the apnormalizepath function. This function was introduced in v2.4.49, and it is exactly this function...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module. Vendor: https://github.com/changeweb/Unifiedtransform PoC Step 1: Log in to the Application and Navigate to Academic module. Step 2: Create Session,Semester,Class,Cour...

Magento-APSB22-48-Security-Patches

Official Magento Patches have been released:Magento Docs These patches address the same security issues as this repository does. Except that we've added a few fixes to older Magento versions. Security patches for APSB22-48 This repository contains Magento 2 Patch Files for the recently found...

nginx-rift-scanner

nginx-rift-scanner Dependency-free Python 3 scanner for CVE-2026-42945 "NGINX Rift" — a CVSS v4.0 9.2 CRITICAL heap-based buffer overflow CWE-122 in ngxhttprewritemodule. What it detects Two independent checks are run on every invocation: Check| How ---|--- Version| nginx -V, dpkg/rpm/apk,...

cve-2017-7269

fixed msf module for cve-2017-7269 fix not work when length of physical path not equal to 19,or has a host binding. add options: PhysicalPathLength,HttpHost for test: host phyiscal path: c:\inetpub\ , length=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module...

Astra Linux – Vulnerability in pam-pkcs11

PAM-PKCS11 is a Linux-PAM login module that enables user login using X.509 certificates. Prior to version 0.6.13, if certpolicy was set to none the default value, then pampkcs11 would only check whether the user was capable of logging into the token. An attacker could create a new token using the...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: CIFS: A connection leak occurs when the tlink setup fails. If the tlink setup fails and connections are lost, then the refcnt leak of the module persists because the cifsd kthread does not exit. Additionally, information from...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: staticcall: Properly handle module initialization failures in staticcalldelmodule. Module insertion invokes staticcalladdmodule to initialize the static calls within a module. staticcalladdmodule calls staticcallinit, which...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Simplified platform device handling Coretemp’s platform driver is unconventional. All the actual processing is performed globally by the initcall and CPU hotplug notifiers. The “driver” essentially just wraps t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed an issue where free sp in the error path could cause system crashes. System crashes were observed during load/unload tests in a loop. 61110.449331 qla2xxx 0000:27:00.0-0042:0: MSI-X disabled. 61110.467494...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. Enables unauthenticated remote code execution against servers using rewrite ... ?... + set capture combinations. Original vulnerability...

ModuleStomping

Part 1 of Countercept's research on module stomping - see https://blog.f-secure.com/hiding-malicious-code-with-module-stomping . The full text of the associated blogpost is available in the Documentation directory...

CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for CVE-2025-57819. Unauthenticated error-based SQL injection in FreePBX's endpoint module chains into a root shell via cron job injection and incron privilege escalation. For authorized testing and research only. Do not use against system...

CVE-2019-9053-port-py3

CVE-2019-9053 Exploit - Python 3 This is a Python 3 port of the CVE-2019-9053 exploit, which targets CMS Made Simple CMSMS versions before 2.2.10. The vulnerability allows for SQL injection through the News module interface. Example Output Tested on the TryHackMe Simple CTF Challenge. Description...

lblfixer_cve_2023_30839

LabelGrup Networks, official PrestaShop Partner Module for PrestaShop 1.7.8.9 to fix CVE-2023-30545, CVE-2023-30839 and CVE-2023-30839 vulnerabilities For further information, check the following links: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

nginx-rift-detect

nginx-rift-detect Behavioral detection script for CVE-2026-42945 NGINX Rift — a heap buffer overflow in ngxhttprewritemodule present in nginx since 2008. ⚠️ Disclaimer This tool is intended solely for authorized security testing and research. Only run this against systems you own or have explicit...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...