Penetration-Testing---Metasploitable-2

Penetration Testing — Metasploitable 2 Lab Autore: Adriano Tum...

PT-2025-38947

Name of the Vulnerable Software and Affected Versions Proof Factor – Social Proof Notifications versions through 1.0.5 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows...

WordPress plugin Proof Factor Social Proof Notifications 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 Remote overflow PO...

Exploit for SQL Injection in Fortinet Fortiweb

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchto...

CVE-2025-59420

creationtimestamp| type| source ---|---|--- 2025-09-20 08:10:15+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-9ggr-2464-2j32...

Exploit for CVE-2025-2894

Unitree Robot BLE Service Command Injection Analysis !Meme...

CVE-2024-57366

creationtimestamp| type| source ---|---|--- 2025-09-20 03:00:05+00:00| published-proof-of-concept| Telegram/SXFD-qVBXvgg67VQCh23mumAE695MVlGdpAI0NU6zP317zs...

WebSockets-C2-PoC

WebSockets-C2-PoC Ab...

CVE-2025-59417

creationtimestamp| type| source ---|---|--- 2025-09-18 14:23:53+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-m79r-r765-5f9j...

Evil Vizier: Vulnerabilities of LLM-Integrated XR Systems

Extended reality XR applications increasingly integrate Large Language Models LLMs to enhance user experience, scene understanding, and even generate executable XR content, and are often called "AI glasses". Despite these potential benefits, the integrated XR-LLM pipeline makes XR applications...

Exploit for Stack-based Buffer Overflow in Microsoft

CV...

CVE-2017-11366

creationtimestamp| type| source ---|---|--- 2025-09-17 21:00:04+00:00| published-proof-of-concept| Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8...

CVE-2017-15689

creationtimestamp| type| source ---|---|--- 2025-09-17 21:00:04+00:00| published-proof-of-concept| Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8...

Exploit for CVE-2010-1240

CVE-2010-1240 PDF Launch Action Research Tool !Pythonhttps...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the verifyClientProof function which use Arrays.equals function. An attacker can infer sensitive authentication material by exploiting timing differences during the comparison of secret values. Remediation Upgrade...

CVE-2025-59377

creationtimestamp| type| source ---|---|--- 2025-09-15 13:18:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51708...

CVE-2024-54566

creationtimestamp| type| source ---|---|--- 2025-09-15 11:31:22+00:00| published-proof-of-concept| Telegram/NY0PhVqFEGahdlKMTXW9KMbuYCC2BEHsndHx5vZ3JyUwA 2025-11-10 00:10:21+00:00| published-proof-of-concept| Telegram/K2VlNUTNNJWNgNBJDb9pzFFq97RFqHYdx8xHhHzC5Ekeew...

Exploit for CVE-2025-38501

Overview Proof-of-Concept exploit for KSMBDrain CVE-2025-3850...

fastjson-remote-code-execute-poc

This is a Java-based proof-of-concept PoC exploit for a remote code execution RCE vulnerability in the FastJSON library, version 1.2.24. The exploit is designed to be used with IntelliJ IDEA, a popular integrated development environment IDE for Java development. The exploit consists of two main...