136135 matches found
CVE-2026-63030
🚨 CVE-2026-63030 — WP2Shell WordPress REST API Route Confusion → Remote Code Execution A Critical WordPress Core vulnerability enabling REST API route confusion that can be chained with SQL Injection to achieve unauthenticated Remote Code Execution. 📖 Overview CVE-2026-63030 is a Critical...
ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root
Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root
Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-33816 CVE-2026-33816 in github.com/jackc/pgx/v5 - Patched by Root
Root has patched CVE-2026-33816 in the github.com/jackc/pgx/v5 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-34986 CVE-2026-34986 in github.com/go-jose/go-jose/v4 - Patched by Root
Root has patched CVE-2026-34986 in the github.com/go-jose/go-jose/v4 package for Root:Go. Multiple fixed versions available...
MLFlow < 2.8.1 - Sensitive Information Disclosure
An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. id: CVE-2023-43472 info: name: MLFlow 2.8.1 - Sensitive Information Disclosure author: ritikchaddha severity: high description: | An issue in MLFlow versions...
WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF
WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...
n8n-RCE
n8n RCE PATCHED Remote Code Execution via n8n Workflows Based on CVE-2025-68613 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python exploit.py -u -e -p...
exploits
exploits This repository contains all of the shellcode or exploits I submitted to https://www.exploit-db.com/. All exploits listed here are not 0day, all software talked about have a fix available. Please note that the exploits are either for your own curiosity on your own machines, or to check...
OpensSSL_1.0.1g_AfterPatch
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2026-1357-Lab
CVE-2026-1357 — WPvivid Backup & Migration Vuln vs Patched Docker Lab Local-only Docker lab for comparing WPvivid Backup & Migration: Vulnerable: 0.9.123 Patched: 0.9.124 Built for learning practice lab setup, verification, logs, notes. Anything PoC-related is intended to run only inside this lab...
Follina
Follina PATCHED Remote Access Shell for Windows based on cve-2022-30190 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ $ git clone https://github.com/AbdulRKB/Follina.git $ cd Follina $ pip install -r requirements.txt $ python main.py...
cve-2024-44308
cve-2024-44308 Michael Goppert, Michael Jennings, and John Jennings Safety This issue in WebKit was patched long before this proof-of-concept was released. As such, it did not pose any danger to real users: the whole purpose is to document these kinds of exploits so that we know how to protect...
ROOT-APP-PYPI-CVE-2026-31899 CVE-2026-31899 in cairosvg - Patched by Root
Root has patched CVE-2026-31899 in the cairosvg package for Root:PyPI. Multiple fixed versions available...
log4j-patched
Log4J Patched Dependency for Log4Shell This repository aims to provide a patched version of the Log4J library for legacy system that can not be updated right away. The patch consist in a modified version of the log4j-core.x.x.x.jar file following the official recommandation of the Apache...
ROOT-OS-DEBIAN-12-CVE-2026-32647 CVE-2026-32647 in nginx - Patched by Root
Root has patched CVE-2026-32647 in the nginx package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-44487 CVE-2023-44487 in varnish - Patched by Root
Root has patched CVE-2023-44487 in the varnish package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-52005 CVE-2024-52005 in git - Patched by Root
Root has patched CVE-2024-52005 in the git package for Root:Ubuntu:24.04. Multiple fixed versions available...