CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye Remote Code Execution RCE Professional Proof-of-Concept PoC for CVE-2025-60787, a critical Remote Code Execution RCE vulnerability in MotionEye versions ≤ 0.43.1b4. Technical Overview The vulnerability arises from a client-side validation bypass in the configUiValid...

CVE-2026-6356

Augmentt: Privilege Escalation via Parameter Tampering Credits This CVE was a collaborative effort between: HelloWorld Author – GitHub: https://github.com/Penquinsecq Raznov – GitHub: https://github.com/basraznov Description A vulnerability in the web application allows standard users to escalate...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

CVE-2023-34837

CVE-2023-34837 — eScan Management Console: Reflected Cross-Site Scripting XSS Overview CVE-2023-34837 is a Reflected Cross-Site Scripting XSS vulnerability discovered in the Microworld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GrpPath POST...

CVE-2024-12986

CVE-2024-12986 Scanner and Exploit This repository contains a scanner and exploit for the CVE-2024-12986 vulnerability, which is a command injection vulnerability in the apmcfgupptim endpoint of DrayTek Gateway Devices. The vulnerability allows an attacker to execute arbitrary commands on the...

Zimbra-CVE-2026-73570-Rules

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Detection rules for CVE-2026-73570 , an OS command injection in Zimbra Collaboration Suite via the SNMP trap notification parameter snmpnotify. Vulnerability Field| Detail ---|--- CVE| CVE-2026-73570 Type| OS command injection Affected| Zimbr...

CVE-2025-2304-exploit

CVE-2025-2304 - Camaleon CMS Mass Assignment Privilege Escalation 📌 Project Description CVE-2025-2304 is a Mass Assignment vulnerability in Camaleon CMS versions 2.9.1 that allows an authenticated user to elevate their privileges to administrator by manipulating the role parameter in password...

CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

CVE-2024-46878-TikiCMS-XSS

CVE-2024-46878 - Tiki CMS Reflected Cross-Site Scripting XSS Vulnerability Tiki CMS - 'page' Parameter Reflected Cross-Site Scripting XSS Vulnerability Disclaimer Intended only for educational, research, and defensive purposes. Unauthorized use against systems without permission is illegal. Summa...

CVE-2023-6063

CVE-2023-6063 PoC Reference Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 | WPScan Plugin setting Enable "WP Fastest Cache". PoC The "wordpressloggedin" cookie parameter is vulnerable. $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php"...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2023-34836

CVE-2023-34836 — eScan Management Console 14.0.1400.2281: Reflected Cross-Site Scripting XSS Overview CVE ID: CVE-2023-34836 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...

CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC Unauthenticated RCE vulnerability in Fuel CMS 1.4.1. The filter parameter in the /fuel/pages/select/ endpoint is passed unsanitized to a eval call in the PHP backend, allowing arbitrary code execution via a crafted payload. Unlike blind...

CVE-2025-11177

Trigger the SQLi with a time-based payload in the public login curl -w '\nTIME:%timetotal\n' -s \ -d 'log=anything%27%3B%20SELECT%20pgsleep5%3B%20--&pwd=irrelevant&wp-submit=Log+In' \ -d 'redirectto=' \ -d 'testcookie=1' \ 'http://target/wp-login.php'...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS in Hospital Management System Vulnerability Details CVE ID: CVE-2023-7173 Vulnerability Type: Stored XSS Affected Component: User login page Vulnerable Parameter: Fullname Ventor Details: phpgurukul.com Vulnerable Version: Hospital Management System...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

Ghazi

Ghazi Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace Every GET or POST Parameters With Selected TAB in "Proxy" or "Repeater" TAB XSS tab of Ghazi Replacing Every Parameters to XSS PayLoad SSTI...

CVE-2024-46879-TikiCMS-XSS

CVE-2024-46879 - Tiki CMS Reflected Cross-Site Scripting XSS Vulnerability Tiki CMS - 'zipPath' Parameter Reflected Cross-Site Scripting XSS Vulnerability Disclaimer Intended only for educational, research, and defensive purposes. Unauthorized use against systems without permission is illegal...