CVE-2023-22515

CVE-2023-22515 كيف تعمل طريقة الكشف هذه؟ ينظر هذا القالب إلى نقاط النهاية التالية: - "BaseURL/dologin.action" - "BaseURL" - "BaseURL/pages" - "BaseURL/confluence" - "BaseURL/wiki" من هذه النقاط النهائية، سيقوم باستخراج الإصدار. إذا تطابق الإصدار مع أي من الإصدارات أدناه، فإنه يُعتبر ضعيفًا معرضًا...

dcsgonefwbsp

dcsgonefwbsp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

playSMS <1.4.3 - Remote Code Execution

PlaySMS before version 1.4.3 is susceptible to remote code execution because it double processes a server-side template. id: CVE-2020-8644 info: name: playSMS 1.4.3 - Remote Code Execution author: dbrwsky severity: critical description: PlaySMS before version 1.4.3 is susceptible to remote code...

CVE-2019-19781-CitrixRCE

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...

CVE-2024-36991

CVE-2024-36991 Nuclei Template Description This repository contains a Nuclei template to detect the path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. The vulnerability allows unauthorized access to sensitive files, such as /etc/passwd. CVE Detai...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

nuclei_template

لا يحتوي هذا المستودع على ملف README...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

CVE-2019-3396

CVE-2019-3396 Confluence Widget Connector path traversal CVE-2019-3396 RCE POC POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Content-Type:...

CVE-2026-87902-PoC-pwnVader

CVE-2026-87902 — تضمين ملف محلي بدون مصادقة في آلية حل قوالب الصفحات في نواة ووردبريس ← تنفيذ تعليمات برمجية عن بُعد المؤلف: pwnVader · الترخيص: MIT جذر المستودع | ---|--- المكوّن| نواة ووردبريس wp-includes/template.php النوع| CWE-98 — تضمين ملفات PHP LFI ← RCE المتأثر| WordPress 7.1.2 فرع 7.0 تم...

XWiki-Platform-RCE-CVE-2025-24893

XWiki Platform Unauthenticated RCE Exploit Overview This script is a refurbished Bash implementation of an exploit targeting the XWiki Platform versions affected by CVE-2025-24893. It leverages a critical unauthenticated remote code execution vulnerability that allows attackers to execute arbitra...

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei Template सत्यापन प्रयोगशाला यह भंडार एक सामान्य-उद्देश्य शोषण PoC भंडार नहीं है। यह projectdiscovery/nuclei-templates में योगदान के लिए इच्छित CVE-2026-45185 टेम्पलेट के व्यवहार को पुन: उत्पन्न करने और समीक्षा करने के लिए एक स्थानीय सत्यापन प्रयोगशाला है। The nuclei code...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

magento2-template-filter-patch

تصحيح فلتر القالب لماجنتو 2 لثغرات CVE-2022-24086, CVE-2022-24087 تصحيح ماجنتو 2 لثغرات CVE-2022-24086, CVE-2022-24087. يصلح ثغرة تنفيذ التعليمات البرمجية عن بُعد RCE والأخطاء ذات الصلة عن طريق إجراء هروب عميق لمتغيرات القالب. إذا لم تتمكن من ترقية ماجنتو أو لا يمكنك تطبيق التصحيحات الرسمية، جرب...

cve-2021-4034

cve-2021-4034...

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 This repository contains a Proof of Concept PoC demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution RCE...

cve-2024-32651

cve-2024-32651 changedetection rce عبر ssti...

CVE-2021-46703

CVE-2021-46703 Simple payload builder based on POC in: https://github.com/Antaris/RazorEngine/issues/585 Usage C dotnet build --configuration Release .\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText"rce.txt", "Hello World";" Python ./poc.py "System.IO.File.WriteAllText"rce.txt",...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...