CVE-2025-4162030

Security Advisory: CVE-2025-4162030 This security summary was provided by CoPilot ^1^. The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be...

CVE-2025-4162029

Security Advisory: CVE-2025-4162029 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

CVE-2025-65899

CVE-2025-65899: Kalmia CMS v0.2.0 - is vulnerable to Observable Response Discrepancy Vulnerability Overview CVE ID: CVE-2025-65899 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Observable Response Discrepancy Privileges Required: None Impact Allows unauthenticated...

CVE-2025-4162026

Security Advisory: CVE-2025-4162026 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

CVE-2018-15473

You will need Python 2.7 to use this exploit. install all the module given bellow in python 2.7 Like: python2 -m pip install numpy python2 -m pip install paramiko python2 -m pip install property To test single username use this command: python ./sshuserenumeration.py -u Like: python...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

CVE-2021-31762

..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021...

OpenNebula-CVE-2025-56536

OpenNebula-CVE-2025-56536 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in user information Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept : Fix : Upgrade to...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

CVE-2024-39306

Description This script is a PoC for CVE-2024-39306, where a RCE is possible due to a SQLi where an authenticated user can execute arbitrary commands on a server running ChurchCRM -p -b -c Example: python3 CVE-2024-39306.py -u FirstLast -p Password123 -b http://localhost/churchcrm -c whoami Links...

aad-sso-enum-brute-spray

aad-sso-enum-brute-spray POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln Description This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks here is the Ars Technica article that...

XLL_Phishing

XLLPhishing Introduction With Microsoft's recent announcement regarding the blocking of macros in documents originating from the internet email AND web download, attackers have began aggressively exploring other options to achieve user driven access UDA. There are several considerations to be...

BigFinger

CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Python3 script to exploit the unauthenticated remote code execution vulnerability CVE-2023-46747 in F5 BIG-IP appliances via the TMUI interface. Basically, if this vuln hits, you get a shell without credentials. Built with threading, file inpu...

CVE-2022-47952

Descripción sugerida lxc-user-nic en lxc hasta 5.0.1 se instala con setuid root, y puede permitir a usuarios locales inferir si existe algún archivo, incluso dentro de un árbol de directorios protegido, porque "Failed to open" a menudo indica que un archivo no existe, mientras que "does not refer...

CVE-2022-31294

CVE-2022-31294 Online Discussion Forum Site 1.0 - Account Takeover Exploit Title: Online Discussion Forum Site 1.0 - CSRF Create New/Update Existing Admin User Account Takeover Date: 2022-06-13 CVE: CVE-2022-31294 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage:...

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/ihebski/wpUsersScan.git $ c...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

Dumb0

Dumb0 A simple tool to dump users forums popular forums and CMS WordPress, SMF, vBulletin, IP Board, XEN forums, myBB, useBB, vanilla, bbPress.... Supported 27 forums/CMS help us to grow the number!: SMF -- Simple Machine Forums IPB -- Invision Power Board XEN -- Xen Foro VB -- vBulletin myBB --...

CVE-2018-7690

CVE-2018-7690 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...