CVE-2020-35847_CVE-2020-35848

Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848 Cockpit CMS before version 0.11.2 is vulnerable to a NoSQL Injection vulnerability in the /auth/resetpassword and /auth/newpassword that allows extraction of password reset tokens which allow for user details enumeration as well as passwo...

CVE-2026-113718 virtualenv: Xonsh activation literals depend on the script decoding codec

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote uses repr to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSHENCODING. Under a legacy multibyte codec...

EUVD-2026-105299

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote uses repr to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSHENCODING. Under a legacy multibyte codec...

CVE-2026-113718 virtualenv: Xonsh activation literals depend on the script decoding codec

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote uses repr to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSHENCODING. Under a legacy multibyte codec...

CVE-2026-113718

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote uses repr to write printable non-ASCII prompt or destination data into UTF-8 activate.xsh, while xonsh can read that script using $XONSHENCODING. Under a legacy multibyte codec...

CVE-2026-113718

The virtualenv tool is vulnerable to code injection in versions prior to 21.14.9 . The issue exists in the POSIX xonsh activation quote() function, which uses repr() to write non-ASCII data into the UTF-8 activate.xsh script. When using legacy multibyte codecs like GBK or Big5 , a UTF-8 trail byt...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 PowerShell Fix This powershell script fixes CVE-2021-36934, based on the original script of Joran Slingerland https://github.com/JoranSlingerland https://github.com/JoranSlingerland/CVE-2021-36934/blob/main/CVE-2021-36934.ps1 The Powershell script will do following:...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Installation $ ./install.sh Only own version build are supported yet. Please choose own and debug to build your debug version. Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status...

CVE-2021-26086

CVE-2021-26084 this is a script written in golang to exploit Confluence OGNL Injection CVE-2021-26084. git clone https://github.com/march0s1as/CVE-2021-26084/ cd CVE-2021-26084 go get -v github.com/fatih/color go build post.go ./post.go -h...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

cve-2023-22515-exp

cve-2023-22515-exp Python exploit script for cve-2023-22515 Arguments: -h, --help show this help message and exit -H HOST, --host HOST Specify the URL -U USERNAME, --username USERNAME Specify the username -PW PASSWORD, --password PASSWORD Specify the password -E EMAIL, --email EMAIL Specify the...

velociraptor_CVE-2025-6264_PoC

CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...

CVE-2024-28784

CVE-2024-28784 — Stored XSS in IBM QRadar SIEM Rule Wizard 🛠 Product Information Vendor: IBM Product: IBM Security QRadar SIEM Affected Version: 7.5.0 UpdatePackage 7 Build 20230822112654 Component: Rule Wizard Regular Expression Logic Block CVE ID: CVE-2024-28784 🐞 Vulnerability Summary A stored...

CVE-2026-113657

A flaw was found in sanitize-html. This vulnerability allows a remote attacker to achieve arbitrary script execution when an application is configured to permit namespace-prefixed Scalable Vector Graphics SVG animation elements. By submitting specially crafted SVG markup, an attacker can bypass U...

CVE-2025-53786

CVE-2025-53786 Exploit This project provides a proof-of-concept PoC exploit targeting a critical vulnerability in Microsoft Exchange Server hybrid deployments, identified as CVE-2025-53786. This vulnerability allows an attacker with administrative access to an on-premises Exchange server to...

javascript-deobfuscator

javascript-deobfuscator Deobfuscator for javascript-obfuscator 5.x output. Feed it obfuscated JS, get back readable JS that runs the same. Setup Requires Node 18+. git clone https://github.com/lolcaken/javascript-deobfuscator.git cd javascript-deobfuscator npm install npm run build Usage...

CVE-2020-15053

CVE-2020-15053 : Artica Proxy before 4.28.030418 Community Edition allows Reflected Cross Site Scripting. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 00...

CVE-2026-25939-SCADA-FUXA-Unauthenticated-Remote-Arbitrary

👤 Author Mohammed Idrees Banyamer Security Researcher 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2026-25939 , a critical authorization bypass vulnerability in FUXA open-source SCADA/ICS software. The vulnerability allows unauthenticated remote attackers to create,...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...