299068 matches found
CVE-2026-7458
🧨 CVE-2026-7458 – PickPlugins User Verification OTP Bypass Unauthenticated Authentication Bypass via Loose Comparison in OTP Verification REST API PickPlugins User Verification ≤ 2.0.46 📖 Description The User Verification plugin by PickPlugins for WordPress versions ≤ 2.0.46 contains a critical...
CVE-2026-93582 Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...
EUVD-2026-97258
The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...
Exploit-CVE-2011-2523
README : Exploit for VSFTP 2.3.4 This Python script is designed to exploit a backdoor vulnerability present in VSFTP version 2.3.4. The exploit grants unauthorized access to the system running this particular version of VSFTP. Usage To use this exploit script, follow these steps: Clone Repository...
CVE-2026-36227
CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...
CVE-2025-27893
CVE-2025-27893: External Control of Assumed-Immutable Web Parameter in Archer Platform Description In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy...
CVE-2026-21132
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability...
CVE-2026-21132
A vulnerability in Samsung Internet prior to version 30.0.5.24 exists due to improper input validation . This flaw allows remote attackers to perform arbitrary script injection , which requires user interaction to trigger. No specific exploit details or direct links are provided in the documentat...
CVE-2026-21132
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability...
CVE-2025-65271
CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...
CVE-2025-4334
CVE-2025-4334 - Simple User Registration --form Arguments: -u / --url → Base WordPress URL e.g. https://target.com/wordpress/ --form → Full URL of the registration form e.g. https://target.com/wpr/default-registration/ Example: python3 CVE-2025-4334.py -u https://example.com/wordpress --form...
CVE-2021-43858-MinIO
CVE-2021-43858 MinIO exploit MinIO User Privilege Escalation Vulnerability CVE-2021-43858 exp Run: go run exp.go ip port...
Important: Red Hat Security Advisory: emacs security update
An update for emacs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2019-1698
TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Day Started: 30/07/2024 Check the diff code betwween ver has vuln and ver of code with fix vuln: Code reference 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php Code reference...
cve-2022-46395-qemu
CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU/no-Mali lab for reproducing the portable trigger condition of CVE-2022-46395 against the Arm Mali r36p0 driver lineage. The lab is intended for local vulnerability research and regression testing. It does not carry the Pixel-specific...
CVE-2023-38873-G1
🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Base Score: 6.5 MEDIUM Scale: CVSS ⚠️ 📌 Description This repository demonstrates a Clickjacking security flaw present on the G1 website. The vulnerability allows an attacker to load the site inside an iframe , overlaying malicious elements...
RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111
Windows 11 RRAS Vulnerability Simulation Lab CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANT – Educational & Defensive Use Only This guide is for setting up an isolated, controlled lab environment to understand integer overflow vulnerabilities in the Windows Routing and Remote Access...
CVE-2019-18818_CVE-2019-19609
Exploits for CVE-2019-18818 and CVE-2019-19609 This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609. CVE-2019-18818 This vulnerability allows an attacker to reset the password of an admin user in the Strapi CMS. Usage 1. Modify the target and...
CVE-2026-24061
🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...
Confluence Server - Remote Code Execution
Confluence Server and Data Center contain an OGNL injection vulnerability that could allow an authenticated user, and in some instances an unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version...