WordPress My Calendar <3.4.22 - SQL Injection

WordPress My Calendar plugin versions before 3.4.22 are vulnerable to an unauthenticated SQL injection within the 'from' and 'to' parameters of the '/my-calendar/v1/events' REST route. id: CVE-2023-6360 info: name: WordPress My Calendar 3.4.22 - SQL Injection author: xxcdd severity: critical...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. id: CVE-2018-19365 info: name: Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal author: 0xAkoko severity: critical...

D-Link Central WifiManager - Server-Side Request Forgery

D-Link Central WifiManager is susceptible to server-side request forgery. The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, as demonstrated by an...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

Bank Locker Management System - Cross-Site Scripting

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass

Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x are vulnerable to authentication bypass. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the...

Nova noVNC - Open Redirect

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-3654 info: name: Nova noVNC - Open Redirect author: geeknik severity: medium...

Advantech R-SeeNet - Cross-Site Scripting

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the graph parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. id: CVE-2021-21801 info: name: Advantech R-SeeNet - Cross-Site Scripting author: gy74...

Jorani 1.0.0 - Remote Code Execution

Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. id: CVE-2023-26469 info: name: Jorani 1.0.0 - Remote Code Execution author: pussycat0x severity: critical description: | Jorani 1.0.0, an attacker could leverage path traversal to access files...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

cve-2025-59934

cve-2025-59934 cve-2025-59934 PoC...

telnetd

telnetd Не знаю, что здесь делать, скоро отредактирую, но это для telnetd CVE-2026-24061...

CVE-2025-24893

CVE-2025-24893...

CVE-2021-4034

This repository does not have a README...

exploits

This repository does not have a README...

OpenPLC_v3

OpenPLC Runtime version 3 ⚠️ This project has reached End of Life and is no longer maintained. It has been replaced by OpenPLC Runtime v4. Please visit the new repository for installation instructions, documentation, and support. OpenPLC is an open-source Programmable Logic Controller that is base...

CVE-2026-41575

CVE-2026-41575...

CVE-2020-6519

تم نشر هذا أصلاً على مستودع PerimeterX الرسمي على Github عبر حساب Github الخاص بعملي. على الرغم من أن هذا هو عملي - فإن جميع الحقوق والمسائل القانونية تعود لشركة PerimeterX. ثغرة اليوم صفر في Chromium 83 لتجاوز CSP الكامل عبر المنصات CVE-2020-6519 Exploit DB مقال تقني كما تم إلى مشروع Chromium...

Ascii-And-Sub-Encoder

ASCII And/Sub Encoder تم إنشاء هذه الأداة أثناء تحضيري لدورة CTP من Offensive Security والتي تؤدي إلى شهادة OSCE القديمة. تولّد الأداة تعليمات تجميع متوافقة مع nasm لمشفّر طرح ASCII مخصص. يعتمد تطوير هذه الأداة على وصف منطق مشفّر طرح ASCII كما هو موضح في منشور المدونة التالي من Vello Security Vel...