18542 matches found
Exploit for Incorrect Authorization in Sudo_Project Sudo
sudo CVE-2025 Toolkit Unified scanner, benign proof-of-...
Insecure Inherited Permissions
Overview Affected versions of this package are vulnerable to Insecure Inherited Permissions in the LocalStorage handler. An attacker can gain unauthorized access to sensitive information or modify data by exploiting improper permission enforcement in this component. Remediation There is no fixed...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...
Exploit for Code Injection in Xwiki
CVE-2025-24893-P...
CVE-2025-55156
creationtimestamp| type| source ---|---|--- 2025-08-09 22:45:37+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-pwh4-6r3m-j2rf...
CVE-2024-0000
creationtimestamp| type| source ---|---|--- 2025-08-09 15:00:07+00:00| published-proof-of-concept| Telegram/cnPJN6mfEy0qs6POD0JOTxjWLJtRLn4F7YmOhIb54r6ZiM...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Sudo CVE-2025-32463 — PoC !GitHub last commithttps://img.s...
Directory Traversal
Overview tiny-scientist is an A lightweight framework for building research agents Affected versions of this package are vulnerable to Directory Traversal via the reviewpaper function in the backend/app.py file. An attacker can access arbitrary PDF files on the server by supplying crafted file...
CVE-2025-54885
Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication. In versions 2.0.0 and below, a protocol compliance bug causes the client to generate a fixed 252 bits of entropy instead of the intended bit length of the safe prime defaulted t...
SUSE CVE-2020-26240
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch estimated early January, 2021. This happened on the ETC chain on...
CVE-2025-55152
creationtimestamp| type| source ---|---|--- 2025-08-08 23:11:09+00:00| published-proof-of-concept| https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9...
Exploit for Code Injection in Xwiki
PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC...
Exploit for CVE-2025-7769
CVE-2025-7769 – Remote Command Injection in mobileapi Des...
Exploit for CVE-2025-4126
POC-CVE-2025-4126 smart contract reentrancy attack vulnerabili...
CVE-2025-54798
creationtimestamp| type| source ---|---|--- 2025-08-06 07:22:36+00:00| published-proof-of-concept| https://github.com/raszi/node-tmp/security/advisories/GHSA-52f5-9888-hmc6...
📄 Oracle 19c / 21c Denial of Service
Oracle Database versions 19c and 21c proof of concept exploitation details for CVE-2023-22077. It illustrates that even though the "Lockdown Profile" security feature was in-place to restrict OS accessibility, an attacker is able to cause a denial of service attack that can impact all customers...
PoC_Vuldb
It is an offensive tool for web applications. The repository app...
CVE-2025-8517
creationtimestamp| type| source ---|---|--- 2025-08-04 19:38:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46571...
CVE-2025-544241
creationtimestamp| type| source ---|---|--- 2025-08-04 13:28:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/46538 2025-08-04 21:00:05+00:00| published-proof-of-concept| Telegram/C3dLOex4qKF8CrF74Ro2jk8I9HmXrLWpS6IVMSsoWA8-ZJQ...