770095 matches found
zero2shell-50
ZeroToShell-50 🚀 A highly curated, containerized training g...
zoneminder-rce-poc
just wait and see Proof of concept for an OS command injectio...
Exploit for CVE-2025-2304
CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0...
Exploit for CVE-2026-42926
CVE-2026-42926 NGINX HTTP/2 Frame Injection Lab A controlled...
CVE-2026-11437
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
Exploit for Classic Buffer Overflow in Tp-Link Tl-Wr940N_Firmware
CVE-2024-54887 TypeScript PoC This repository contains a Type...
EUVD-2026-34972
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2026-11437
The CVE-2026-11437 entry describes a server-side request forgery in perfree go-fastdfs-web (up to version 1.3.7). The vulnerability affects the Installation Endpoint, specifically the function checkServer in /install/checkServer. An attacker can remotely trigger SSRF by manipulating inputs, with ...
CVE-2026-11437 perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2026-11437
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2026-11436
A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mageai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirecturl results in cross site scripting. Remote...
CVE-2026-11435
A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectplan.aspx. Such manipulation of the argument httpOID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor...
offensive-claude-533
Offensive Security Research Config for Claude Code !TIP...
Kernel-Exploit-Dojo-127
Kernel-Exploit-Dojo-127 CTF kernel exploitation notes, PoCs,...
glitchtip-session-auth-bypass-poc
GlitchTip authorization bypass PoC This PoC documents and rep...
offensive-claude-604
Offensive Security Research Config for Claude Code !TIP...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
CVE-2026-11436
Mage AI up to version 0.9.79 is affected in the Sign-in Flow. The vulnerability is in the useMutation function within mage_ai/frontend/components/Sessions/SignForm/index.tsx, where manipulating the query.redirect_url argument triggers cross site scripting. Remote exploitation is possible, and the...
CVE-2026-11436
A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mageai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirecturl results in cross site scripting. Remote...
CVE-2026-11436 Mage AI Sign-in Flow index.tsx useMutation cross site scripting
A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mageai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirecturl results in cross site scripting. Remote...