CVE-2026-28695-craft-rce-bypass

CVE-2026-28695 patch bypass — Craft CMS ≤ 5.9.8 authenticated RCE element-search CVSS 3.x : 8.8 HIGH approx — verify CWE : CWE-502 Unsafe Object Instantiation + CWE-1336 SSTI origin Base : CVE-2026-28695 SSTI via create + Symfony Process Fix : advisory fix e31e508 restricts create to BaseObject —...

HexRaysCodeXplorer

| | | | | \ / \ | | \ \ / / | | | || | | |/ / | / / | | \ V / | | | |/ \ / / // | | | / | | / \ / |/ / | ' | |/ | '/ \ '| | | | | / | |\ \ | | || \ \ /\ | | | / /^\ \ | | | | | | / | | |///\| \,|, |/// ,|\/ / ./||/|| || / | | | |/ ||...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

CVE-2023-6933

Introduction to CVE-2023-6933 Vulnerability Description The "Better Search Replace" plugin for WordPress exhibits a critical vulnerability known as PHP Object Injection. This security flaw is present in all versions up to and including 1.4.4. It arises from the deserialization of untrusted input,...

CVE-2026-87915-PoC-pwnVader

CVE-2026-87915 — Popup Maker = 1.24.0 — Unauthenticated stored XSS valuesName Author: pwnVader · License: MIT repository root | ---|--- Component| Popup Maker – Boost Sales, Conversions, Optins, Subscribers WordPress plugin Type| CWE-79 — Stored Cross-Site Scripting Affected| = 1.24.0 Fixed| 1.25...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC for CVE-2023-20198 Vulnerability information and exploit usage offered by smokeintheshell See references Endpoint, http content type and headers management have been modified from other existing POCs to work in situations in which other exploits fail...

sccm-http-looter

SCCM HTTP Looter How it works SCCM distribution points DPs are the servers used by Microsoft SCCM to host all the files used in software installs, patches, script deployments, etc. By default, these servers allow access via SMB TCP/445 and HTTP/S TCP/80 and/or TCP/443 and require some type of...

CVE-2021-3156

CVE-2021-3156 toc Vulnerability Overview Vulnerability ID: CVE-2021-3156 Vulnerability Score: Affected Product: Linux sudo Affected Versions: 1.8.2-1.8.31sp12; 1.9.0-1.9.5sp1 Exploitation Conditions: Linux local; sudo is suid and executable Impact: Local privilege escalation Source Code:...

CVE-2026-62347

The Element Call native Matrix video conferencing application (versions 0.16.0 through 0.20.3 ) is vulnerable to sensitive information disclosure. The standalone SPA component logs the password URL query parameter; if a user submits an error report (rageshake ), these logs are shared with the app...

EUVD-2026-114519

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...

CVE-2026-62347 Element Call exposes shared passwords in logs

Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Element Call SPA logs the password URL query parameter. When a user submits an error report, called a rageshake, these logs are shared with the application operator. Users can therefore...

CVE-2018-10583

CVE-2018-10583 An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://192.168.0.2/test.jpg" within an "office:document-content...

CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1.The vulnerability exists in the Project Selector component, where project names returned via an AJAX request are inserted into the page without proper output...

BEAST-PoC

BEAST-PoC chosen-plaintext attack This proof of concept is focused on the cryptography behind the BEAST Browser Exploit Against SSL/TLS attack presented by Thai Duong and Juliano Rizzo on September 23, 2011. This a chosen-plaintext attack and this allow you to retrieve sensitives informations if...

CVE-2026-60137-WordPress-Core-SQL-Injection-PoC

CVE-2026-60137 — WordPress Core SQL Injection PoC Non-destructive proof-of-concept and verification harness for CVE-2026-60137 , a blind SQL injection in WordPress core WPQuery::authornotin, reachable via the REST API's authorexclude parameter. Root Cause WPQuery::getposts builds SQL by...

CVE-2022-46364-Poc

CVE-2022-46364 Exploit Apache CXF SSRF via MTOM XOP:Include | CVSS 9.8 CRITICAL Vulnerability Apache CXF -s -d -t, --target - Vulnerable CXF SOAP endpoint required -s, --ssrf-url - Internal URL to exfiltrate required -d, --domain - Target domain default: localhost --plain-soap - Use plain SOAP...

Instatic-Stored-XSS-CVE-2026-103931

URL scheme filter bypass in isSafeUrl via leading C0 control characters Affected: Instatic v0.0.13 / commit 63ad5d6 and all earlier revisions containing src/core/html-sanitize/index.ts Component: src/core/html-sanitize/index.ts → isSafeUrl / safeUrl Class: CWE-79 Stored XSS via CWE-184 Incomplete...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

CVE-2026-19952

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-19952 Write-up: https://abraxaslabs.tech/research/CVE-2026-19952 CVE-2026-19952 Frontend Admin by DynamiApps 3.29.12 - DynamiApps I am @abraxasnull. Loopback lab. The client is CVE-2026-19952-Abraxas-Labs.py...