Exploit for CVE-2026-16723

FastJson 1.2.83 GenProbe2 Purpose: Used to reproduce the...

CVE-2025-55182

CVE-2025-55182 - React & Next.js Server Actions RCE Exploit Full-featured Remote Code Execution exploit and scanner for CVE-2025-55182 in React/Next.js Server Actions. Original PoC: Spritualkb/CVE-2025-55182-exp Overview CVE-2025-55182 is a critical prototype pollution vulnerability in React Serv...

CVE-2025-5394

🚨 CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme 📌 Affected Product: Alone – Charity Multipurpose Non-profit WordPress Theme Versions: 🚀 Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

CVE-2026-10288-AUTH-BYPASS

Hotel and Tourism Reservation System - Authentication Bypass Vulnerability Details Field| Details ---|--- Title| Hotel and Tourism Reservation System - Authentication Bypass Vendor| code-projects.org Product| Hotel and Tourism Reservation System Version| 1.0 Vulnerability Type| Improper...

EUVD-2026-104405

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqlierror of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...

CVE-2026-112153 vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqlierror of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...

CVE-2026-112153 vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqlierror of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...

CVE-2026-112153

The vraj404 Criminal-Management-System is vulnerable to SQL injection within the Officer Registration Form component. Specifically, the mysqli_error function in the Officers/addOfficer.php file is affected. Attackers can initiate a remote attack by manipulating the offName/offID/ID/contact/gender...

CVE-2026-112153 vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqlierror of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument...

CVE-2026-112309

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

EUVD-2026-104401

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2026-112309

The @rvf/set-get library (versions before 7.0.4 ) is vulnerable to a prototype pollution vulnerability within the setPath function. This flaw allows unauthenticated attackers to overwrite properties of shared built-in functions by leveraging inherited Object.prototype methods. Specifically, an at...

CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

CVE-2019-9053

CVE-2019-9053 Improved code of Daniele Scanu SQL Injection exploit Following changes applied: Added time control variable -t or --time that enables user to extend the timing of SQL injection useful if a network connection in between hosts is subject of delays with packet transmission Network...

CVE-2026-43499

CVE-2026-43499 Exploitation Notes Severity: HIGH CVSS: 7.8 Impact: Confidentiality, Integrity, Availability Published: 2026-05-21 Technical Summary CVE-2026-43499 is a vulnerability within the Linux kernel, specifically affecting the rtmutex component, which is responsible for managing real-time...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

libptrace

libptrace libptrace is an event driven process/thread debugging, tracing, and manipulation framework. It is written in C and has Python 2.7 and 3.7 bindings. It is meant to be used as a library. The API has been designed with cross-platform support in mind. Although the current version only runs ...