CVE-2024-7313

Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...

CVE-2025-0108-PoC

CVE-2025-0108 Proof of Concept PoC This repository contains a Proof of Concept PoC for the CVE-2025-0108 vulnerability, which is an authentication bypass issue in Palo Alto Networks' PAN-OS software. The scripts provided here test for the vulnerability by sending a crafted HTTP request to the...

CVE-2023-23752

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability Script Usage Install python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scan python3 CVE-2023-23752.py -f urlpart.txt Affected Versions 4.0.0 =...

cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link symlink before the ownership change...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - Unauthorized Account Takeover. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CNVD-2022-27366__CVE-2023-37621

CVE ID CVE-2023-37621 PRODUCT Fronius Fronius Datalogger Web 2.0.5-4 VERSION Fronius Fronius Datalogger Web 2.0.5-4 PROBLEM TYPE Unauthorized access vulnerability DESCRIPTION Fronius is a European welding machine manufacturer. Unauthorized access to Fronius Datalogger Web allows attackers to gain...

CVE-2025-22828

CVE-2025-22828 📜 Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...

EvilReflex

What's this? This is a simple test for evilReflex vulnerablility in smart constract. How to test? Step 1：compile evilReflex.sol Step 2：deploy HACKME eg: Account Address： 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract address：...

CVE-2022-44149

CVE-2022-44149 This tool helps identify the CVE-2022-44149 vulnerability in routers, allowing researchers and security professionals to test their systems. It includes authentication header generation, payload delivery, and detailed logging for analysis. EN This tool is designed to test the...

joomla_CVE-2023-23752

joomlaCVE-2023-23752 Unauthorized access vulnerability nuclei...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...

CVE-2024-24919

EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...

Anti-Tamper-Perturbation

🛡️ Anti-Tamper Protection for Unauthorized Individual Image Generation Official Code for ICCV 2025 Paper 📄 Anti-Tamper Protection for Unauthorized Individual Image Generation ⚙️ Environment Setup conda create --name ATP --file requirements.txt conda activate ATP 🔐 Launch ATP 1. Download Dataset...

ROS-20261019-73-0099

The vulnerability in Java-21-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0097

The vulnerability in Java-11-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0098

The vulnerability in Java-17-openJDK is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-117539

Name of the Vulnerable Software and Affected Versions Hono versions 4.12.4 through 4.13.10 Description The serveStatic component in the Hono web application framework incorrectly decodes a routed request path a second time before performing a filesystem lookup. This behavior allows a malformed...

ROS-20261019-73-0096

The vulnerability in Java 1.8.0-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261019-73-0100

The vulnerability in Java-25-openjdk is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2023-23752-Joomla

CVE-2023-23752-Joomla Disclaimer: This cybersecurity tool is provided solely for technical support and does not involve any application or commercial use. Users must not use this cybersecurity tool in any way that infringes upon the legitimate rights and interests of others. The operation of this...