150111 matches found
CVE-2025-22828
CVE-2025-22828 π Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...
EvilReflex
What's this? This is a simple test for evilReflex vulnerablility in smart constract. How to test? Step 1οΌcompile evilReflex.sol Step 2οΌdeploy HACKME eg: Account AddressοΌ 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract addressοΌ...
CVE-2022-44149
CVE-2022-44149 This tool helps identify the CVE-2022-44149 vulnerability in routers, allowing researchers and security professionals to test their systems. It includes authentication header generation, payload delivery, and detailed logging for analysis. EN This tool is designed to test the...
joomla_CVE-2023-23752
joomlaCVE-2023-23752 Unauthorized access vulnerability nuclei...
authz0
Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...
CVE-2021-27905
CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...
CVE-2024-50945
CVE-2024-50945 Description SimplCommerce is affected by a Broken Access Control vulnerability in the review system, allowing unauthorized users to post reviews for products they have not purchased. Detection Method An attacker can detect this vulnerability by sending a request to the review...
CVE-2024-24919-POC
CVE-2024-24919 PoC π π₯ Description This script automates the exploitation of CVE-2024-24919 Checkpoint Security Gateway Unauthorized Information Disclosure. π Features β Single & Bulk URL Testing β Automated Exploitation β Simple & Fast π οΈ Usage Clone this repo and run the script: git clone...
CVE-2024-24919
EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...
Electrolink-FM-DAB-TV
Electrolink-FM-DAB-TV For CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 Description Electrolink FM/DAB/TV Transmitter web management...
Anti-Tamper-Perturbation
π‘οΈ Anti-Tamper Protection for Unauthorized Individual Image Generation Official Code for ICCV 2025 Paper π Anti-Tamper Protection for Unauthorized Individual Image Generation βοΈ Environment Setup conda create --name ATP --file requirements.txt conda activate ATP π Launch ATP 1. Download Dataset...
PT-2026-117539
Name of the Vulnerable Software and Affected Versions Hono versions 4.12.4 through 4.13.10 Description The serveStatic component in the Hono web application framework incorrectly decodes a routed request path a second time before performing a filesystem lookup. This behavior allows a malformed...
ROS-20261019-73-0096
The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261019-73-0098
The vulnerability in Java-17-openJDK is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261019-73-0097
The vulnerability in Java-11-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261019-73-0100
The vulnerability in Java-25-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20261019-73-0099
The vulnerability in Java-21-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2023-23752-Joomla
CVE-2023-23752-Joomla Disclaimer: This cybersecurity tool is provided solely for technical support and does not involve any application or commercial use. Users must not use this cybersecurity tool in any way that infringes upon the legitimate rights and interests of others. The operation of this...
CVE-2021-27289
π CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices π Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...
CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN
CVE-2026-0073 β Android ADBD TLS Authentication Bypass EVPPKEYcmp Type Confusion β Unauthorized ADB Shell π₯ Overview A critical authentication bypass vulnerability exists in Android's ADB daemon adbd that allows any attacker on the local network to obtain full shell access on a target device...