PraisonAI - Authentication Bypass

PraisonAI 2.5.6 to 4.6.34 contains a broken authentication caused by disabled default authentication in legacy Flask API server, letting remote attackers access /agents and trigger workflows without token, exploit requires network access to API server. id: CVE-2026-44338 info: name: PraisonAI -...

CVE-2020-0688_EXP

CVE-2020-0688EXP CVE-2020-0688EXP Auto trigger payload python3 CVE-2020-0688EXP.py -h usage: CVE-2020-0688EXP.py -h -s SERVER -u USER -p PASSWORD -c CMD -e optional arguments: -h, --help show this help message and exit -s SERVER, --server ECP Server URL Example: http://ip/owa -u USER, --user USER...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Backdoor Exploit This is a Python-based exploit script for the infamous backdoor found in vsftpd version 2.3.4. When triggered, it opens a shell on port 6200 — granting remote command execution as the root user in some vulnerable setups. About the Vulnerability vsftpd...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055 Reproduction KeePass CVE-2023-24055 Reproduction 1. Prepare machines: Kali 192.168.232.129, Windows 10 192.168.232.128 2. Keepass version: 2.53 2. Principle: By modifying the KeePass configuration file KeePass.config.xml, add a trigger configuration...

USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

CVE-2011-2523-exploit

CVE-2011-2523 Exploit vsFTPd 2.3.4 Backdoor This project demonstrates exploitation of the vsFTPd 2.3.4 backdoor vulnerability CVE-2011-2523 using Python and pwntools. Disclaimer: This project is for educational and authorized penetration testing purposes only. Do NOT use against systems without...

Manipulating-Web-Agents

Manipulating Autonomous LLM-based Web Agents with Indirect Prompt Injection Attacks With the ubiquity of LLM-integrated applications, investigating potential security risks is crucial. One of the most significant vulnerabilities in these systems is their susceptibility to adversarial attack via...

Another-Metabase-RCE-CVE-2023-38646

Extensión del RCE sin autenticación en Metabase CVE-2023-38646 explicado aquí Esto me ayudó a evitar errores relacionados con "base de datos ya en uso" con H2 y postgre como motores "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null,...

CVE-2023-24055

Disclaimer This script is for educational and demonstration purposes only. The author does not endorse or condone the use of this script for any criminal or malicious activities and it should only be used where explicitly allowed with proper permission. This script should be used with caution, as...

cve-2020-35498-flag

cve-2020-35498-flag Flag the cve-2020-35498 attack Build Requires gcc and go. make Filter The filter was built with bpfasm and placed in filter.c. Catch the vulnerability with sudo ./target/catch Trigger with Trigger the vulnerability through interface wlan0 with destination aa:bb:cc:dd:ee:ff. su...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

CVE-2019-7489

This repository does not have a README...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: now lets do it...

cve-2011-2523-vsftpd-validation-lab

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Validation Lab ⚠️ Authorized Lab Only — conducted in an isolated VirtualBox Host-Only network using Kali Linux and Metasploitable2. No unauthorized systems were scanned or accessed at any point. Overview CVE-2011-2523 is one of the most well-known supply chain...

CVE-2026-21858

CVE-2026-21858 RCE PoC environment for n8n 1.120.4 with a Form Trigger workflow and an exploit script. Requirements Docker Docker Desktop on Windows Python 3.x attack side Files Dockerfile — build the n8n vulnerable environment run.bat — run the container Windows workflow.txt — n8n workflow...

vsftpd-backdoor

Exploit for the vsftpd 2.3.4 Backdoor CVE-2011-2523 This exploit takes advantage of a backdoor in version 2.3.4 of the vsftpd FTP service. The backdoor was maliciously introduced into the source code and allows remote command execution as root on the affected server How it works The backdoor is...

CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar Free ≤ 10.11.2 — Author-Role User Bypasses Content Review to Inject Persistent XSS via Location Title, Triggered on Hover by Any Visitor -orange SUMMARY The $location-title field is rendered without htmlspecialchars in...

CVE-2026-73318

CVE-2026-73318: Missing authorization on force-agreement actions XenForo before 2.3.13 lets any ACP administrator trigger site-wide privacy-policy and terms re-agreement. What happens The ACP navigation entries are limited to administrators with the option permission, but ForceAgreementController...

CVE-2021-43297-POC

CVE-2021-43297 Vulnerability Description Apache Dubbo Hessian-Lite 3.2.11 and earlier versions contain a potential RCE attack risk. When Hessian-Lite encounters a serialization exception, it outputs related information, which may trigger the toString method of certain maliciously crafted Beans,...