CVE-2024-57175

CVE-2024-57175: Stored Cross-Site Scripting XSS in PHPGURUKUL Online Birth Certificate System v1.0 Description A stored Cross-Site Scripting XSS vulnerability was identified in PHPGURUKUL Online Birth Certificate System v1.0 in the /user/certificate-form.php page. This vulnerability allows...

regreSSHion

regreSSHion Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387 Please modify this as per your own needs. This is provided as an example...

lldp

lldp Mythic C2 profile for peer-to-peer communication over IEEE 802.1AB LLDP. C2 data is carried inside Organizationally Specific TLVs Type 127 with a configurable OUI so that frames blend with vendor-specific LLDP extensions on the wire. LLDP is Layer 2 only. Both agents must share a broadcast...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2019-19658

CVE-2019-19658 Chevereto stored XSS in profile page - 1.0.0 - 1.1.4 Free, Registered user injects some script into the name field, in this case to redirect the user to Google Someone enters the profile of /test and is then redirected...

PT-2026-118327

UNSUPPORTED WHEN ASSIGNED Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of verbose debug logging and profile information. This...

PT-2026-119526

DBI versions before 1.656 for Perl crash via type confusion in dbi profile when a database handle is destroyed under a Profile Path with an attr element. An attr element names a database handle attribute, which dbi profile reads from the handle's inner hash. It expects the inner handle as a...

CVE-2023-37790

CVE-2023-37790 Author: KaizenSecurity Description: Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. 1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790 2. https://vuldb.com/?id.244831 3...

EUVD-2025-26366

A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely...

CVE-2026-56851

A flaw was found in golang.org/x/text. An attacker can cause a Denial of Service DoS by submitting specially crafted input to an application utilizing the Nickname profile. When transforming this input into an undersized destination buffer, an out-of-bounds slice indexing error occurs, causing th...

InstagramOSINT

Instagram OSINT Tool - Archive The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile. This repository has been archived. The information includes: 1. Username 2. Profile Name 3. URL 4. Followers ...

CVE-2026-108833

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2022-44268-MagiLeak

ImageMagick Arbitrary Read Files - CVE-2022-44268 This repository contains a proof-of-concept PoC code for exploiting the arbitrary file read vulnerability CVE-2022-44268 in ImageMagick. The PoC demonstrates how an attacker can leverage the vulnerability to read arbitrary files on the system...

windows-security-cve-2017-8543

Example InSpec Profile This example shows the implementation of an InSpec profile...

EUVD-2026-104148

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-108833 Apache Kylin: default startup profile miss security settings

Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-108833

Apache Kylin versions 4.0.0 through 5.0.4 are affected by a vulnerability where the default startup profile misses necessary security settings. Deployments that have the security setting profile explicitly turned on are not impacted. To remediate this issue, users are recommended to upgrade to ve...

profilehound

/ \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines. It uses the...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Automating exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Description ImageMagick will interpret the...

container-cve-2021-22555

Reproducer for CVE-2021-22555 as a container First, this rolls in the exploit code from here as a handy pre-built container: https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555 Pre-built container: quay.io/cgwalters/cve-2021-22555 Mitigation: seccomp profiles A stron...