CVE-2026-93399

CVE-2026-93399 — Bookly IDOR order token disclosure & booking rollback Python 3 PoC for CVE-2026-93399 in Bookly bookly-responsive-appointment-booking-tool. Description PoCbit / GitHub CVE-2026-93399 — Bookly ≤ 28.2 suffers from Insecure Direct Object Reference CWE-639 on public booking AJAX:...

EUVD-2026-91258

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.1 via the OsPaypalConnectController::createorderfortransaction action registered as a public unauthenticate...

CVE-2026-94432

The Appointment Booking Plugin – LatePoint for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 5.7.1 . The flaw exists in the OsPaypalConnectController::create_order_for_transaction() action, which is exposed as an unauthenticated route via wp...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 Windows目录介绍 a、开机启动程序目录c C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持c C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup c. System installation path...

SpringBoot_Actuator_RCE

swagger-ui Interface /swagger-ui.html SpringBoot env: Obtaining Sensitive Information Masked with Part 1 When we directly visit the springboot site, we can see that some password fields are filled with 1. Plaintext fields can be obtained via $name 2. Misconfiguration leads to sensitive informatio...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Tetsuo: https://www.x.com/tetsuo Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Update of Reference Count (CVE-2026-52943)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505956; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-104441

Name of the Vulnerable Software and Affected Versions Multidict versions 6.7.0 through 6.9.0 Description A reference leak exists in the C extension of the multidict data structure. The issue occurs during the items-view reflected union operation, operand | d.items, within the multidict itemsview...

Siemens SIMATIC S7-1500 CPU 1518 MFP Release of Invalid Pointer or Reference (CVE-2026-46116)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505964; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-104140

Name of the Vulnerable Software and Affected Versions LatePoint | Calendar & Scheduling for WordPress versions prior to 5.7.2 Description An Insecure Direct Object Reference exists via the OsPaypalConnectController::create order for transaction action, which is registered as a public route throug...

CVE-2025-55182

CVE-2025-55182 Si buscas una explicación real, msanft/CVE-2025-55182 tiene una buena con un PoC funcional. Este repositorio solo contiene algunas cosas que probé, que arrojaron resultados interesantes más o menos. ./thing.py ahora contiene un PoC funcional, la mayor parte tomado de...

CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm

CVE-2026-85046 Saw the other POC of this and I thought to myself this is such a nightmare to look at. So I went and simplified the POC and added a jump to your own wasm. Because wasm. Chrome 152.0.7977.75 can confuse object pointers with integers during sort. poc.js keeps a stale Wasm module...

CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457 This is one of those where Mozilla labeled a Critical as a High. So someone might want to go have Firefox update the original bug hunters payment if that's the case. THE TLDR: You can do an OOB R primitive on a controlled pointer and the...

CVE-2026-35678

Vulnerability Research Report: All Eduplus Student ERP Insecure Direct Object Reference IDOR Researcher: Vinay Sharma 1. Executive Summary This report details a high-severity security vulnerability identified in the Eduplus Student ERP platform, specifically within the student learner portal...

CVE-2021-44228

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2026-42945

CVE-2026-42945 Security Detection Tool This is a CVE-2026-42945 static detection tool for defense and internal network investigation, used to check whether there are high-risk rewrite combinations in NGINX ngxhttprewritemodule related configurations. This project does not provide exploit code, do...

CVE-2026-24688

CVE-2026-24688 - pypdf - Circular Reference DoS Vulnerability This repo includes proof of concept code for triggering CVE-2026-24688. Summary Critical Denial of Service vulnerability in pypdf's outline bookmark parsing logic. When processing a PDF with circular outline references, the parser ente...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK Zero-Copy Reference Count Underflow, Page-Cache Overwrite Privilege Escalation HackSpeak distribution mirror. This repository is a distribution mirror of MaherAzzouzi/vsockdrop , with code identical to upstream; upstream does not include a LICENSE, so...