CVE-2026-47670

CVE-2026-47670 Authenticated Remote Code Execution via loadReader functionName code injection in DbGate DbGate is an open-source, cross-platform database management tool designed for developers and database administrators who need to work with multiple database systems simultaneously. It provides...

CVE-2026-54597

CVE-2026-54597 - ITFlow Time-Based Blind SQL Injection Severity: High Advisory: GHSA-m63v-j7fw-hq2h Affected: ITFlow agent/ajax.php — expires parameter Fixed in: Commit 63d8691 Author: iltosec Summary A time-based blind SQL injection vulnerability in ITFlow's share link generation handler. The...

CVE-2024-36401-poc

CVE-2024-36401 — GeoServer OGC XPath Injection RCE Unauthenticated Remote Code Execution exploit for GeoServer via OGC filter valueReference parameter injection XPath/JXPath evaluation. Disclaimer: This tool is intended for authorized penetration testing and security research only. Do not use...

CVE-2025-13673

CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated SQL Injection in Tutor LMS WordPress plugin = 3.9.6 via the couponcode parameter. Quick Start 1. Clone and start the lab git clone https://github.com/dinosn/CVE-2025-13673.git cd CVE-2025-13673 ./setup.sh Deploys WordPress + Tutor LMS...

CVE-2026-107848 Contao: Cross-site request forgery in custom backend actions

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUESTTOKEN only for POST requests, while the declarative GET guard runs only when an act parameter is present. Backend actions dispatched through the key parameter can therefore execute...

CVE-2026-107848 Contao: Cross-site request forgery in custom backend actions

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUESTTOKEN only for POST requests, while the declarative GET guard runs only when an act parameter is present. Backend actions dispatched through the key parameter can therefore execute...

CVE-2026-107848

The Contao Open Source CMS (versions 4.0.0 until 5.3.50 and 5.7.12) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The root cause is that RequestTokenListener only validates the REQUEST_TOKEN for POST requests, while the declarative GET guard only activates when an act parameter is pr...

CVE-2025-0133-exploit

CVE-2025-0133 Scan A script written on python just to check the existence of a CVE-2025-0133 Reflected Cross-Site Scripting vulnerability that occurs in Palo Alto. The file getconfig.esp is detected and tested for XSS using the given script. Usage: darkfear@b0x:/CVE-2025-0133-exploit$ python3...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

CVE-2008-4687-exploit

CVE-2008-4687-exploit Exploit rápido y sucio en Python para CVE-2008-4687. Descripción por NIST: manageprojpage.php en Mantis anterior a 1.1.4 permite a usuarios autenticados remotos ejecutar código arbitrario a través de un parámetro sort que contiene secuencias PHP, las cuales son procesadas po...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php SQL injection NAME OF AFFECTED PRODUCTS AVL Rooms Vendor Homepage https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ submitter dazhi Vulnerable File /city.php VERSIONS V1.0 Software Link...

CVE-2025-2945

CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...

CVE-2024-36058

CVE-2024-36058 — Koha Library Software CVE ID: CVE-2024-36058 Product: Koha Library Software Vulnerability Type: Time-Based Blind SQL Injection CWE-89 CVSS Score: 8.1 High Authenticated Affected Versions: Below 22.05.22 Credits: Karolis Narvilas Description Koha is an open-source integrated libra...

WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter vulnerability

Authenticated Custom+ Privilege Escalation to 'user' Parameter vulnerability discovered by Wordfence PRISM in WordPress Plugin Groundhogg versions = 4.9...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Affected: Dropcam Pro, Nest Cam Indoor/Outdoor models Latest Build Affected: 205-600052 Partial Fixed Build: 205-600055 UPDATE The latest fw version 205-600055 does not fix the WiFi dissassociation vulnerability in the Dropcam Pro. If the supplied WiFi network does...

WordPress Blocksy Companion plugin <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter vulnerability

Unauthenticated Privilege Escalation to 'role' Parameter vulnerability discovered by Sawyer in WordPress Plugin Blocksy Companion versions = 2.1.58...

CVE-2026-66493

Path Traversal in File Operations Delete / Copy / Move PhocaCommander ≤ 6.1.3 — Authenticated Admin Manipulates Files Outside Webroot SUMMARY The file action handler in PhocaCommander constructs source and destination paths from attacker-controlled base64-encoded parameters pathfrom, pathwhere...

CVE-2026-66492

Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

WordPress Online Scheduling and Appointment Booking System – Bookly plugin <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_details vulnerability

Unauthenticated Sensitive Information Exposure in 'phone' Parameter to booklyrenderdetails vulnerability discovered by R3D in WordPress Plugin Bookly versions = 28.4...