CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 PoC de inyección SQL en Content API de TryGhost Ghost CMS ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Descripción general CVE-2026-26980 es una vulnerabilidad de inyección SQL no autenticada en la Content API de TryGhost Ghost...

CVE-2026-15282

CVE-2026-15282 — Instant Appointment 批量 RCE 利用工具 预认证 filegetcontents + fileputcontents → PHP Webshell 概述 CVE-2026-15282 是 Instant Appointment WordPress 插件（≤ 1.2）中的一个严重（CVSS 9.8）未认证任意文件上传漏洞。 addservicefront AJAX 动作通过 wpajaxnopriv 注册，允许未认证访问。该处理器直接将用户提供的 imageurl 和 imagename 传递给 filegetcontents 和...

CVE-2026-60137

wpsqli - WordPress SQLi Extractor CVE-2026-60137 A fast, menu-driven database extraction tool exploiting the authornotin SQL injection vulnerability in WordPress core. This tool focuses purely on database enumeration and dumping, utilizing the REST batch route confusion CVE-2026-63030 to reach th...

nginxrift-CVE-2026-42945

NGINX Rift RCE Exploit CVE-2026-42945 from @DepthFirstDisclosures A professional Proof-of-Concept PoC tool for researching and identifying the NGINX Rift vulnerability, a critical heap-based buffer overflow in the ngxhttprewritemodule. Vulnerability Overview CVE ID: CVE-2026-42945 Alias: NGINX Ri...

CVE-2025-55182

Escáner y Exploit de CVE-2025-55182 !Warning Este repositorio está destinado únicamente a fines educativos y de investigación. Utilice los PoCs proporcionados exclusivamente en sistemas que posea o tenga permiso explícito para probar. El acceso no autorizado , la explotación o el mal uso de...

CVE-2026-48909-Joomla-SP-Exploit

CVE-2026-48909 Joomla SP LMS — Inyección de Objetos PHP no Autenticada → Ejecución Remota de Código Herramienta de prueba de concepto para CVE-2026-48909 Autor: Sudeepa Wanigarathna !IMPORTANT Solo para uso autorizado. Esta herramienta está destinada a la investigación de seguridad, educación y...

poc-cve-2019-14287

PoC of CVE-2019-14287 Overview This is a sample that reproduces the sudo vulnerability CVE-2019-14287 on a Docker container. Exercise Steps 1. Start the container with docker compose up -d 2. Enter the container with docker exec -it vulnerablesudoapp bash 3. Execute whoami and id commands to...

cve-2019-2725

cve-2019-2725 参考资料： Tenable - https://www.tenable.com/blog/oracle-weblogic-affected-by-unauthenticated-remote-code-execution-vulnerability-cve-2019-2725 Exploit Database - https://www.exploit-db.com/exploits/46780 PaloAlto -...

CVE-2026-48907

🚨 CVE-2026-48907 - JCE Joomla Content Editor Ejecución remota de código no autenticada ⚠️ Ejecución remota de código crítica no autenticada en JCE Joomla Content Editor Una vulnerabilidad crítica de control de acceso que permite a atacantes no autenticados comprometer instalaciones de Joomla...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Unauthorized use is illegal. Users assume all responsibility for their actions. 📋 Overview This repository contains a proof-of-concept exploit for CVE-2026-23744 ,...

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: root@kitploit: jq -cr...

exposecheck

EXPOSECHECK Ejecútalo únicamente contra servidores que poseas o que estés autorizado a probar. Alcance: un resultado positivo solo significa que esta comprobación limitada encontró un desafío de autenticación y una versión de Langflow igual o superior al umbral parcheado para CVE-2025-3248. No es...

CVE-2012-1823

CVE-2012-1823 - PHP CGI Argument Injection Remote Code Execution RCE Severity: Critical CVSS 9.8 CVE: CVE-2012-1823 Published: May 11, 2012 Affected Software: PHP running in CGI mode php-cgi Vulnerability Type: Argument Injection / Remote Code Execution RCE Attack Vector: Network Authentication...

EUVD-2026-72556

knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that allows unauthenticated attackers to read arbitrary files. Attackers can supply directory traversal sequences in the templateFile parameter to bypass path restrictions and read...

EUVD-2026-72560

knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply traversal sequences in the name parameter to escape the imports directory and overwrite arbitrary files writable by the...

EUVD-2026-72561

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

CVE-2022-22963

CVE-2022-22963 Educational proof-of-concept automation for CVE-2022-22963, demonstrated in an authorized Hack The Box lab environment. Overview CVE-2022-22963 is a Spring Cloud Function vulnerability involving the spring.cloud.function.routing-expression header. Under vulnerable configurations, a...

CVE-2017-7921-Writeup-2026

CVE-2017-7921 — 海康威视 IP 摄像头 / DVR / NVR 身份验证不当 — 通过构造的查询参数实现权限提升 | ---|--- CVE ID| CVE-2017-7921 漏洞类型| CWE-287：身份验证不当 CVSS v3.0 基础分数| 10.0（严重） — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS v2.0 分数| 7.5（高危） — AV:N/AC:L/Au:N/C:P/I:P/A:P 披露日期| 2017年（ICS-CERT 公告 ICSA-17-124-01） 厂商| 海康威视数字技术股份有限公司 状态| 已修...

CVE-2026-56011-Lab

CVE-2026-56011 - MapPress Maps para WordPress: XSS no autenticado en la renderización de mapas iframe Resumen ejecutivo Este repositorio contiene un laboratorio Docker local para reproducir y validar CVE-2026-56011, una vulnerabilidad de Cross-Site Scripting no autenticado que afecta a MapPress...

CVE-2026-76977

SAP UI5 is affected by a clickjacking vulnerability in its Frame Options Allowlist mechanism. The framework does not sufficiently validate the parent frame's origin against the configured allowlist, allowing an unauthenticated attacker to host a malicious page that bypasses framing restrictions. ...