CVE-2025-50433

CVE-2025-50433 — Critical Account Takeover Vulnerability Affecting Monnit Cloud Platforms .imonnit.com Summary A critical authentication vulnerability exists across .imonnit.com that allows full Account Takeover ATO on any user account without victim interaction. The backend fails to validate the...

CSRFBrute

CSRFBrute Инструмент для подбора учётных данных с обходом CSRF-защиты - V 0.5.0 Dev Рекомендуется в первую очередь использовать стабильную облегчённую версию csrfbrute.py 🚀 Возможности Динамическое обновление CSRF-токенов - обеспечивает точность на целях с высоким уровнем безопасности...

CVE-2023-38646

CVE-2023-38646 Original script from securezeron During testing, I found that the reverse shell generated by this POC failed due to the trailing '=' character after base64 encoding. I made a slight modification to fix this issue. Original reverse shell payload generation code base64.b64encode"bash...

cve-2026-102268-poc

CVE-2026-102268 — Обход обнаружения асимметричного PEM в PyJWT Результат анализа эксплуатируемости: первопричина подтверждена, и сквозная эксплуатация воспроизводима. Открытый ключ PEM с изменёнными пробельными символами обходит защиту ispemformat в PyJWT и принимается как допустимый секрет HMAC,...

CVE-2024-36539

Here’s a README.md for a Proof of Concept PoC demonstrating the insecure permissions vulnerability in Contour v1.28.3: Proof of Concept PoC for Insecure Permissions Vulnerability in Contour v1.28.3 This repository contains a Proof of Concept PoC script demonstrating an insecure permissions...

CVE-2020-7378

CVE-2020-7378 – OpenCRX Predictable Password Reset Token and XXE Exploit This repository contains a combined proof-of-concept PoC exploit for CVE-2020-7378 , a critical vulnerability in OpenCRX versions up to and including 5.0-20200717. The exploit chains two core issues in the application: 1. A...

CVE-2019-19609-POC-Python

The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...

askWAM

askWAM askWAM запрашивает токены доступа Microsoft Entra без взаимодействия с пользователем через Windows Web Account Manager WAM. Поставляется как клиент .NET Framework, автономный нативный клиент x64 и x64 Beacon Object File с адаптером команд CNA. Все фронтенды могут перечислять учётные записи...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Cross Site Request Forgery Elevation of Privilege Vulnerability This is a Proof of Concept for CVE-2021-24085. 1. poc.py downloads the targets cert file with private key inside 2. YellowCanary generates the msExchEcpCanary csrf token for a specific user...

CVE-2023-31851

CVE-2023-31851 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/status has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

CVE-2024-50335

CVE-2024-50335: Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation Summary The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting XSS, allowing an attacker to inject malicious JavaScript code. This can be...

CVE-2025-23040

CVE-2025-23040 - Credential Leak in GitHub Desktop GitHub Desktop 3.4.12 is vulnerable to an attack that allows exfiltration of credentials via malicious remote URLs. An attacker can convince a user to clone a manipulated repository to obtain username and OAuth token...

CVE-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4 A Concrete CMS admin in versions below 9 did not have to provide their password when changing another user's password. In combination with CVE-2021-28145 "Concrete CMS formerly concrete5 before 8.5.5 allows remote...

CVE-2025-492030

CVE-2025-492030 Security Advisory: CVE-2025-492030 Overview A critical vulnerability has been identified in the SecureVPN application, which allows for account takeover through a vulnerable API endpoint. This flaw could enable attackers to gain unauthorized access to user accounts, potentially...

CVE-2024-34327

CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. ⚠️ Disclaimer This tool is...

CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

CVE-2024-50488

CVE-2024-50488 Token Login history.pushState'', '', '/'; document.forms0.submit;...

CVE-2026-105119 OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows

OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose responsetype is exactly code, so codes issued through OpenID Connect hybrid flows code token, code idtoken, code token idtoken carry no bound challenge. An attacker who intercepts such a code ca...

CVE-2026-51954

Product: Webasyst Framework Affected Version: ≤ 4.0.3 Severity: High CVSS 3.1: 8.0 Description Webasyst Framework through 4.0.3 contains an OAuth 2.0 implementation flaw that allows a remote, unauthenticated attacker to intercept authorization credentials issued during the OAuth flow, without...