Lucene search
+L

1744 matches found

Packet Storm
Packet Storm
•added 2025/04/03 12:00 a.m.•329 views

📄 Usermin 2.100 Username Enumeration

Usermin versions 2.100 and below suffer from a username enumeration vulnerability. Exploit Title: Usermin 2.100 - Username Enumeration Date: 10.02.2024 Exploit Author: Kjesper Vendor Homepage: https://www.webmin.com/usermin.html Software Link: https://github.com/webmin/usermin Version: = 2.100...

5.3CVSS5.9AI score0.02566EPSS
SaveExploits6
GithubExploit
GithubExploit
•added 2025/03/29 2:12 a.m.•271 views

Exploit for CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC...

9.1CVSS7.7AI score0.99225EPSS
SaveExploits62
GithubExploit
GithubExploit
•added 2025/03/28 2:21 a.m.•316 views

Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortideceptor

CVE-2023-26209 Exploit Automation Para Fins Educacionais 🚨 📌...

5.3CVSS5.6AI score0.01748EPSS
SaveExploits1
osv_cve
osv_cve
•added 2025/03/26 10:15 p.m.•23 views

CVE-2025-20233

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...

3.3CVSS5.9AI score0.00119EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/03/26 1:03 p.m.•667 views

Exploit for Out-of-bounds Write in Nasa Cryptolib

PoC for CVE-2025-30216: CryptoLib Heap Overflow Vulnerability...

9.4CVSS6.9AI score0.0265EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2025/03/23 7:41 p.m.•259 views

Exploit for CVE-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization...

9.1CVSS7.8AI score0.99225EPSS
SaveExploits62
GithubExploit
GithubExploit
•added 2025/03/23 7:41 p.m.•228 views

Exploit for CVE-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization...

9.1CVSS7.8AI score0.99225EPSS
SaveExploits62
GithubExploit
GithubExploit
•added 2025/03/17 11:48 a.m.•1098 views

Exploit for Path Traversal in Gibbonedu Gibbon

CVE-2023-34598 - Gibbon v25.0.0 LFI Exploit This repository c...

9.8CVSS8.8AI score0.47238EPSS
SaveExploits4
GithubExploit
GithubExploit
•added 2025/03/16 4:05 a.m.•265 views

Exploit for CVE-2024-7014

PoC for-CVE-2024-7014 Exploit Proof of concept for the CVE-202...

7.1CVSS8.5AI score0.01375EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2025/03/12 2:20 a.m.•329 views

Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortimail

CVE-2022-29056 Exploit Automation Para Fins Educacionais 🚨 📌...

5.3CVSS5.7AI score0.01808EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2025/02/24 8:02 p.m.•372 views

Exploit for CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary Fil...

6.6CVSS8.9AI score0.0091EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2025/02/19 8:13 a.m.•662 views

Exploit for Uncontrolled Resource Consumption in Ietf Http

CVE-2023-44487 POC for CVE-2...

7.5CVSS7.3AI score0.99999EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/02/15 10:57 p.m.•551 views

Exploit for Unrestricted Upload of File with Dangerous Type in Fileorganizer

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated S...

8.8CVSS8AI score0.02355EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/15 10:20 p.m.•18 views

CVE-2025-24836

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests,...

7.1CVSS5.9AI score0.00243EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/02/14 1:42 p.m.•413 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

WordPress CVE-2024-10924 Exploit 📌 Overview This repository...

9.8CVSS7.8AI score0.82218EPSS
SaveExploits22
NVD
NVD
•added 2025/02/13 10:15 p.m.•19 views

CVE-2025-24836

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests,...

7.1CVSS0.00243EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/13 9:55 p.m.•46 views

CVE-2025-24836 Qardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted Bluetooth connection to the affected device. This would prevent the device from connecting to a clinician's app to take patient readings and ostensibly flood it with requests,...

7.1CVSS0.00243EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/13 9:55 p.m.•87 views

CVE-2025-24836

CVE-2025-24836 affects Qardio Heart Health iOS/Android apps and QardioARM A100 hardware. A specially crafted Python script can send continuous startMeasurement commands over an unencrypted Bluetooth connection, preventing the device from linking with a clinician’s app and flooding it with request...

7.1CVSS5.8AI score0.00243EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/02/07 7:48 p.m.•596 views

Exploit for Code Injection in Moodle

This is a PoC exploit for CVE-2024-43425, a vulnerability in Moo...

8.1CVSS8.3AI score0.87536EPSS
SaveExploits8
GithubExploit
GithubExploit
•added 2025/02/06 11:11 a.m.•502 views

Exploit for CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Unauthenticated Pri...

9.8CVSS6.2AI score0.0287EPSS
SaveExploits3
Rows per page
Query Builder