WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

PAN-OS Web Interface Code Execution

The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

N8n Snowflake Node MySQL Node Unauthorized Access

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform for workflow processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to gain unauthorized access to read, modify, and...

MFlash secure messaging platform Token Theft Account Takeover

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to obtain the authorized user token and gain control of the user’s account...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

GitLab Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created wiki pages from a remote...

Ivanti Endpoint Manager XSS

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS and execute arbitrary code with administrator...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

WebGUI Component Code Execution

The vulnerability of the WebGUI component of the microprogramming software for WRC-1167GHBK2-S relates to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Demo User Digital Zoom Studio Plugin XSS

The vulnerability of the Demo User Digital Zoom Studio plugin in the WordPress content management system is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Export/Import Products to Excel XSS

The vulnerability of the “Export/Import Products to Excel” plugin exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2025-1050

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

D-Link DIR-816 Router XSS

The vulnerability of D-Link DIR-816 router’s microprogramming software is related to the lack of measures taken to protect the website structure during the processing of SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2022-28668

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fields plugin SQL Injection

The vulnerability of the Fields plugin in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

Centreon-web RCE

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

MXSecurity SQL Injection Unauthorized Access

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and gain unauthorized access to protected...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using a specially crafted...

McAfee ePolicy Orchestrator XSS

The vulnerability of the McAfee ePolicy Orchestrator console for managing enterprise security integrated solutions is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute a cross-site scripting attack remotely...

Cisco SD-WAN Cross-site attacks

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...