WordPress ProveSource Social Proof plugin <= 3.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Bao BlueRock in WordPress Plugin ProveSource Social Proof versions = 3.1.2...

WordPress plugin ProveSource Social Proof 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2025-34185 · WordPress · Provesource Social Proof

Name of the Vulnerable Software and Affected Versions: ProveSource Social Proof versions n/a through 3.0.5 Description: ProveSource Social Proof contains a flaw that allows the retrieval of embedded sensitive data, leading to the exposure of confidential system information to an unauthorized...

Mermaid improperly sanitizes sequence diagram labels leading to XSS

Summary In the default configuration of mermaid 11.9.0, user supplied input for sequence diagram labels is passed to innerHTML during calculation of element size, causing XSS. Details Sequence diagram node labels with KaTeX delimiters are passed through calculateMathMLDimensions. This method pass...

Exploit for CVE-2024-53900

CVE-2024-53900 - Mongoose populate.match $where RCE This r...

M-Files 25.6.14925.0 Path Traversal

This repository contains a proof-of-concept exploit in C for a suspected path traversal vulnerability in M‑Files version 25.6.14925.0. It attempts to read sensitive files e.g. /etc/passwd by injecting traversal payloads into REST API endpoints...

GHSA-MP56-7VRW-QXVF

creationtimestamp| type| source ---|---|--- 2025-08-18 21:12:49+00:00| published-proof-of-concept| https://t.me/cKure/15266 2026-07-21 13:00:07+00:00| published-proof-of-concept| https://t.me/ckuRED/643 2026-07-22 00:00:24+00:00| published-proof-of-concept| https://t.me/ckuRED/643...

Exploit for CVE-2025-49132

CVE-2025-49132 PoC Improved This is an improved version of...

Elastic Response to Blog ‘EDR 0-Day Vulnerability’

Updated: August 29, 2025 Elastic has been directly engaging with the independent researcher. After evaluating additional information provided by the researcher, our original assessment still stands. To confirm we are responsibly assessing this report and providing an unbiased perspective, we are...

Modified Security Analysis of Device-Independent Quantum Key Distribution with Random Key Basis

Security analysis is a critical part in any cryptographic protocol, may it be classical or quantum. Without security analysis, one cannot ensure the secrecy of the distributed keys. To perform a conclusive security analysis, it is very often necessary to frame the problem as an optimization...

Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

This is a PoC exploit for CVE-2019-19781, a vulnerability in Citrix ADC NetScaler that allows for unauthenticated remote code execution. The tool, called Citrixmash, was published by TrustedSec due to other researchers releasing their code first. The exploit exploits a directory traversal bug in...

Exploit for CVE-2023-1234

It is an offensive tool for SSH exploitation. The repository contains a proof of concept PoC exploit for CVE-2023-1234, which targets vulnerable proxycommand configurations on SSH clients. The target product/service is OpenBSD's SSH, and the vulnerability class/vector is remote command execution...

Exploit for CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Desc...

Exploit for Double Free in Microsoft

CVE-2025-49667 — Win32k Privilege Escalation Exploit !Explo...

0day-buffer-overflow-in-exiv2

PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

The SUPERGROUP known as Scattered Lapsus$ Hunters - A combin...

CVE-2025-50461

creationtimestamp| type| source ---|---|--- 2025-08-15 06:38:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47775 2025-08-15 08:13:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47783 2025-08-15 09:00:04+00:00| published-proof-of-concept|...

Exploit for Injection in Cisco Secure_Firewall_Management_Center

cve2025-20265 Safe Python script to detect Cisco FMC instances...

CVE-2025-50740

creationtimestamp| type| source ---|---|--- 2025-08-14 21:26:09+00:00| published-proof-of-concept| Telegram/guRgvT7EMFw6a7wzD8CHWW7A1OiZpY5IGHJHSa3ooaapPbg...

Exploit for CVE-2020-11989

使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...