Job-Manager-Disclosure

CV Filename Disclosure Scanner – CVE-2015-6668 This script automates the search for CV files such as .jpg, .png, .jpeg publicly exposed via the vulnerability CVE-2015-6668, related to the WP Job Manager plugin for WordPress versions ≤ 0.7.25. 🧠 Description The vulnerability allows knowing the exa...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Halo CMS CORS Misconfiguration + CSRF Protection Bypass Combined Attack Summary A critical combined attack vulnerability exists in Halo CMS versions up to 2.25.4 due to two security misconfigurations: 1. CORS Misconfiguration : The CORS policy allows any origin with credentials:...

CVE-2021-38314

CVE-2021-38314 What is the vulnerability? The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a given site but deterministi...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

proftpd-CVE-2026-42167-analysis

CVE-2026-42167 — ProFTPD modsql SQL Injection / Auth Bypass / RCE Independent reproduction, code-level root-cause walkthrough, and a frank exposure analysis for CVE-2026-42167 — the isescapedtext bypass in ProFTPD's modsql logging pipeline disclosed by ZeroPath Research and fixed in ProFTPD 1.3.9...

CVE-2025-29927-scanner

Next.js Version Vulnerability Scanner by nocomp Overview This Python script is a comprehensive tool for scanning multiple subdomains to detect Next.js versions and identify potential CVE-2025-29927 vulnerabilities. It provides a detailed analysis of web applications built with Next.js across...

CVE-2024-47533-PoC

CVE-2024-47533 – Cobbler XMLRPC Authentication Bypass → Reverse Shell Unauthenticated RCE 📌 Summary This repository contains a Proof-of-Concept PoC exploit for CVE-2024-47533 , a critical authentication bypass in Cobbler's XMLRPC API that leads to unauthenticated remote code execution RCE. The...

Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

Magnolia CMS = 6.2.19 Stored Cross Site Scripting CVE-2022-33098 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision: 1.0 Impact: Stored cross-site scripting in Magnolia CMS 6.2.19...

CVE-2024-50379

CVE-2024-50379 Proof of Concept PoC This repository contains a proof of concept PoC script to exploit CVE-2024-50379 , a vulnerability in Apache Tomcat. The vulnerability is a Time-of-Check Time-of-Use TOCTOU race condition that can lead to remote code execution RCE if the server's configuration...

ProyectoFinalSO

Final Project — Operating Systems 2026-2 Author: Reyna Mendez Cristian Ignacio Requirements GitHub account with access to GitHub Codespaces Approximately 10 GB of free space in the Codespace kernel compilation Approximately 20 minutes to compile Step 1 — Clone and open in Codespaces git clone...

CVE-2026-20805-POC

CVE-2026-20805 PoC Proof of concept for the information disclosure vulnerability in Microsoft's Desktop Window Manager dwm.exe. 📋 Vulnerability Summary ID: CVE-2026-20805 Product: Microsoft Windows Component: Desktop Window Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensitive Information to an...

CVE-2026-34038

CVE-2026-34038: Authenticated Remote Command Injection in Coolify This repository contains documentation and analysis for CVE-2026-34038 , a critical command injection vulnerability in Coolify. Summary An authenticated remote command injection vulnerability CWE-78 in Coolify allows users with...

Global-Protect_VPN_Vuln

CVE-2024-3400 This program was improved upon to include a safety-feature which will catch the cases that will cause this script to be caught in from excuting indefinitely. The base script was created by retkoussa and referenced here. Problem with the previous script:- The script fails if the...

spark-rest-auth-bypass

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-rest-auth-bypass spark-rest-auth-bypass Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation Standalone Master REST is default-on port 6066 and never reads...

CVE-2026-93120

A flaw was found in the Linux kernel's USB gadget configfs component. This out-of-bounds read vulnerability occurs when the osdescqwsignshow function incorrectly handles string length during conversion. A local attacker could potentially exploit this to read sensitive information from memory,...

CVE-2024-32640-SQLI-MuraCMS

And exploited SQL injection vulnerabilities in Mura/Masa CMS. Save this script as CVE-2024-32640.sh and make it executable: chmod +x CVE-2024-32640.sh Run it using: ./CVE-2024-32640-SQLI-MuraCMS.sh --url https://example.com/ --ghauri '--dump --threads 10' @Helltakerc3rb...

CVE-2026-39866

CVE-2026-39866 — Command Injection via unquoted workflow dispatch input Proof-of-concept lab for command injection in GitHub Actions workflow dispatch Purpose CVE-2026-39866 is a command injection bug in Lawnchair's GitHub Actions release workflow. The releaseupdate.yml file passes user input...

MAL-2026-18094 Malicious code in pafex (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ad1f51a6f081ac9e46b3d3ffa2d0b9b150b1600caf826d940f4e3d1992cda16 In this campaign, the main package resion has an embeded pickle disguised as a config. A related dependency pafex contains code to load the pickle. During...