147307 matches found
CVE-2025-57310
CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Base Score: 8.8 High...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619-POC Pre-RINIT session unserialize RCE in PHP...
React2Shell_cve-2025-55182
React Server Components RCE - CVE-2025-55182 Hello! I hope you're having a great day! 😊✨ What's This About? React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 have a serious security problem. The packages react-server-dom-parcel, react-server-dom-turbopack, and...
CVE-2025-55182-Lab
CVE-2025-55182 Lab A hands-on lab to exploit CVE-2025-55182 React2Shell - Remote Code Execution in React Server Components. ⚠️ Disclaimer Educational purposes only. Only test on systems you own. Quick Start Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd...
Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS
CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...
cve-2026-40072-ssrf-lab
CVE-2026-40072 SSRF Lab Hands-on local lab to demonstrate CVE-2026-40072 in web3.py, show the SSRF impact in Burp Suite, and verify the official fix. Overview This repository contains a safe, local-only proof of concept for CVE-2026-40072, a Server-Side Request Forgery SSRF issue tied to CCIP Rea...
CVE-2025-55182
CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...
cve-2025-29927
This is a sample Next.js project bootstrapped with create-next-app for practically explaining how cve-2025-29927 works. https://nextjs.org/docs/app/api-reference/cli/create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open...
CVE-2026-13411
Mattermost versions 11.7.x = 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709...
CVE-2021-48014
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
php2shell-poc
PHP2Shell Patch-Management Lab — CVE-2026-109618 / CVE-2026-10...
CVE-2026-115326
QloApps versions through 1.7.0 are affected by an insecure direct object reference (IDOR) vulnerability in the OrderDetailController::displayAjaxSubmitRefundRequest() function. This flaw allows authenticated customers to submit refund requests for service lines belonging to other customers by pro...
CVE-2026-115326 QloApps through 1.7.0 IDOR via OrderDetailController Refund Request
QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailController::displayAjaxSubmitRefundRequest that allows authenticated customers to submit refunds for other customers' service lines. Attackers can submit foreign idserviceproductorderdetail values with...
CVE-2022-51024
Kavita versions 0.5.2 before 0.5.4.1 are vulnerable to a path traversal vulnerability (CWE-22) that allows unauthenticated attackers to read arbitrary files. By supplying ../ sequences in the filename parameter via GET requests to the /api/image/cover-upload endpoint, an attacker can retrieve sen...
EUVD-2021-34897
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
CVE-2026-85316
CVE-2026-85316 — camel-platform-http: unintended proxy mode from a path prefix Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-platform-http decided whether an endpoint ran in proxy mode by testing whether its configured path started with the string proxy, rath...
CVE-2026-13411 Null condition in Playbooks import crashes the plugin
Mattermost versions 11.7.x = 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709...
CVE-2026-13411
Mattermost versions 11.7.x
CVE-2025-58434-PoC
CVE-2025-58434 PoC Python proof-of-concept script for triggering POST /api/v1/account/forgot-password. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Credit zaddy6 Isaac David arthurgervais...