CVE-2025-55182-exploit

CVE-2025-55182-exploit En résumé Ceci est réservé aux tests de pénétration légaux. Ne vous engagez dans aucune activité illégale. Comment utiliser python3 exploit.py Démonstration vidéo...

CVE-2022-26134

CVE-2022-26134 Use: exploit.py url command...

CVE-2019-1006

CVE-2019-1006 الاستخدام: أدخل "python CVE-2019-1006.py "url"" في الطرفية، حيث url هو رابط خادم RDG Gateway المراد اختباره. على سبيل المثال: python CVE-2019-1006.py "https://www.aaa.com/"...

hoh4

المتطلبات: python الأمر: python laravel-ignition-rce.py ""...

CVE-2023-50596

CVE-2023-50596 الوصف المقترح ثغرة برمجة نصية عبر المواقع Cross Site Scripting في موقع Simple Image Stack باستخدام PHP و API الإصدار v.1.00000 تسمح لمهاجم عن بُعد بتنفيذ كود عشوائي عبر حمولة مصممة في الرابط. معلومات إضافية لنلصق حمولتنا في قسم الرابط "onmouseenter=alert1//...

CVE-2019-7238

CVE-2019-7238 RCE python3 CVE-2019-7238.py url...

CVE-2025-13796-PoC

CVE-2025-13796-PoC تطبيقات deco-cx: تزوير الطلب من جانب الخادم SSRF في المعامل analyticsScript.ts و AnalyticsScript إثبات المفهوم : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

CVE-2024-33210

CVE-2024-33210 تم تحديد ثغرة برمجة نصية عبر المواقع XSS في Flatpress 1.3. تسمح هذه الثغرة للمهاجم بحقن نصوص برمجية خبيثة في صفحات الويب التي يشاهدها مستخدمون آخرون. نوع الثغرة: Cross Site Scripting XSS بائع المنتج: flatpress CMS قاعدة أكواد المنتج المتأثر: Flatpress v1.3 - سيتم إصلاحه في إصدار...

CVE-2019-12541

CVE-2019-12541 ثغرة XSS في Zoho ManageEngine ServiceDesk Plus 9.3 في SolutionSearch.do وصف المعلومات: تم اكتشاف مشكلة في Zoho ManageEngine ServiceDesk Plus 9.3. توجد ثغرة XSS عبر معامل searchText في SolutionSearch.do. المؤلف: Concobe من فريق Tarantula - VinCSS عضو في Vingroup الحمولة...

CVE-2026-103909 Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...

CVE-2026-103909 Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...

CVE-2026-104441

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

CVE-2026-104470

Versions of YesWiki before 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Bazar valeur action . This flaw allows authenticated page editors to force the server to fetch arbitrary URLs by providing them via the url parameter . By embedding this action with a ...

CVE-2026-104470 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services...

CVE-2026-104470 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services...

EUVD-2026-91481

YesWiki before 4.6.7 contains a server-side request forgery vulnerability in the Bazar valeur action that allows page editors to make the server fetch arbitrary URLs. Attackers can supply loopback or internal URLs in the url parameter to probe internal services and inject unescaped remote HTML th...

CVE-2026-104470 YesWiki before 4.6.7 SSRF via Bazar valeur Action url Parameter

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services...

CVE-2026-104441 YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

EUVD-2026-91451

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the valeur action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.p...

CVE-2026-104441

Versions of YesWiki prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause lies in the {{valeur}} action's url parameter, which allows remote attackers to force the server to fetch content from arbitrary hosts and ports. By submitting the action th...