CVE-2023-4294

CVE ID : CVE-2023-4294 Vulnerability Type : Cross-Site Scripting Description : The URL Shortify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the referrer header in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes ...

CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-

CMS Made Simple = 2.2.9 SQL Injection Exploit CVE-2019-9053 📌 Description This exploit targets an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.9 CVE-2019-9053. The vulnerability allows attackers to extract sensitive information such as username, email, password hash, and...

CVE-2020-17519

Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...

CVE-2026-83368

CVE-2026-83368 affects the Compiler component of Oracle GraalVM for JDK , Oracle GraalVM Enterprise Edition , and Oracle GraalVM (Oracle Java SE). Affected versions include Oracle GraalVM for JDK 17 (23.0.13.1), Oracle GraalVM for JDK 21 (23.1.12.1), Oracle GraalVM Enterprise Edition (21.3.19.1),...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131Unsafe Session Storage 0x00 Preface Zabbix vulnerability CVE-2022-23131, I accidentally obtained a Zabbix server of a foreign company. Zabbix Sia Zabbix is an open-source monitoring system developed by Zabbix SIA Zabbix Sia from Latvia. This system supports network...

CVE-2026-83408

CVE-2026-83408 affects the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM (part of Oracle Java SE). Affected supported versions are GraalVM for JDK 17: 23.0.13.1, GraalVM for JDK 21: 23.1.12.1, and GraalVM: 25.0.4.1. The vulnerability allows an unauthenticated attacker with netwo...

CVE-2026-83357

Oracle GraalVM for JDK / Oracle GraalVM (Oracle Java SE, component: Compiler ) contains a vulnerability in affected supported versions: GraalVM for JDK 17 (23.0.13.1), GraalVM for JDK 21 (23.1.12.1), and GraalVM 25.0.4.1. An unauthenticated attacker with network access via HTTP can exploit this f...

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - SQL Injection in Institute of Current Students Summary The loginlinkfaculty endpoint in the Institute-of-Current-Students application is vulnerable to SQL Injection via the fid POST parameter. The parameter is not properly sanitized before being used in a SQL query, allowing remo...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. PoC: root@kitploit: git clone...

CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil 💡 Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...

CVE-2026-41089-Netlogon-RCE

🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...

openssh-cve-2024-6387.sh

OpenSSH CVE-2024-6387 A vulnerability CVE-2024-6387 has been discovered in OpenSSH. Successful exploitation of this vulnerability allows a remote, unauthenticated attacker to execute arbitrary code as root on the target machine. All the glibc-based Linux distributions that have OpenSSH exposed ar...

CVE-2026-82567

mySCADA myPRO Manager exposes an unauthenticated HTTP endpoint in its notification gateway that accepts a phone number and message to send SMS via a connected GSM modem. Because no credentials are required, any attacker with adjacent network access can trigger arbitrary SMS messages through the d...

CVE-2021-38647

OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...

CVE-2026-73807

mySCADA myPRO Manager has a missing authorization vulnerability in its command API , which fails to properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API can reach privileged management functions, rated CVSS 3.1 9.8 (Critical...

white-deface

Author WHITE-DEFACE This is a simple tool to automatically deface vulnerable websites. Tutorial video link at last of this page ⚠️ It uses WebDav vulnerability to exploit. This script sends a PUT requests to the websites given in the targets.txt file. Unauthenticated requests will be accepted and...

CVE-2024-0012

Palo Alto PAN-OS CVE-2024-0012 Vulnerability Checker This Python script checks for the presence of a critical authentication bypass vulnerability in Palo Alto Networks PAN-OS Management Web Interface, identified as CVE-2024-0012. The vulnerability enables an unauthenticated attacker to gain...

CVE-2023-4220

CVE-2023-4220 PoC Chamilo LMS Unauthenticated Big Upload File RCE This repository contains a Proof of Concept PoC for CVE-2023-4220 , a Remote Code Execution RCE vulnerability affecting Chamilo LMS. This vulnerability allows unauthenticated attackers to exploit a large file upload feature, leadin...

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ⚠️ AI Engine = 3.1.3 — Unauthenticated Sensitive Information Exposure → Privilege Escalation GitHub: Nxploited Telegram: @KNxploited IMPORTANT NOTICE: Many unethical individuals attempt to...

letsdefend-cve2024-3400-case-study

letsdefend-cve2024-3400-case-study Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance. CVE-2024-3400 Incident Investigation 🔍 Overview This repository...