EUVD-2026-96780

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2024-2961

CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t TARGET, --target...

s3sec

s3sec Prueba los buckets de AWS S3 para acceso de lectura/escritura/eliminación Esta herramienta fue desarrollada para probar rápidamente una lista de buckets de S3 para acceso público de lectura, escritura y eliminación con fines de pruebas de penetración en programas de bug bounty. Screenshot...

CVE-2022-31630---Proof-of-Concept-Exploit-untuk-PHP-7.4.33

CVE-2022-31630 - Proof of Concept Exploit for PHP 7.4.33 Warning: This code is created solely for educational purposes and testing in an isolated laboratory environment. Use on other systems without authorization is illegal and irresponsible. 📋 Description CVE-2022-31630 is an Out-of-Bounds OOB...

wpgarlic

wpgarlic Un fuzzer de plugins de WordPress como prueba de concepto que llevó al descubrimiento de más de 300 vulnerabilidades en plugins de WordPress instalados en casi 30 millones de sitios. La técnica utilizada se describe en https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html Si deseas...

cve-2026-85706-poc-exploit-gitlab

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

CVE-2025-30208

CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...

cve-2025-58360

GeoServer: CVE-2025-58360 Disclaimer The code and information contained within this repository is for educational and research purposes only. The owner of the repository takes no responsibility for anything you do with the code and/or information within this repository. Your actions are your own...

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402 Jellyfin任意文件读取 functi...

CVE-2022-1015

CVE-2022-1015 A write-up and Local Privilege Escalation Proof-of-Concept of an OOB read and write vulnerability in the Linux Kernel. You can find the write-up of this vulnerability on my blog and you can find my introduction to nftables here as well. An Important note The exploit provided in this...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Patch Changes The patch addresses an integer truncation issue in the OpenSSL ASN.1/DER decoding code. The following changes were made: 1. Updated the ASN.1 content length type Changed the len parameter of asn1exc2i from int to long. This allows the function to receive and handle...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

CVE-2026-98292

A flaw was found in the Linux kernel's MediaTek Bluetooth drivers. The drivers fail to properly validate the length of incoming Wireless Management Task WMT event packets before accessing their data fields. A malicious or compromised device could transmit a truncated or malformed event, causing a...

CVE-2026-108694 ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path...

CVE-2026-108694

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path...

CVE-2026-108694

ConvertX versions through 0.19.0 are vulnerable to an arbitrary file read vulnerability. The root cause is located in src/converters/pandoc.ts, where the application invokes Pandoc without the --sandbox flag. This allows authenticated users to upload a reStructuredText document containing an incl...

EUVD-2026-96697

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path...