CVE-2026-10170-RCE

Visitor Management System 1.0 - SQLi to Remote Code Execution Attack Chain Vulnerability Information Field| Details ---|--- Product| Visitor Management System Vendor| code-projects.org Version| 1.0 Vulnerability Classes| SQL Injection CWE-89 + Unrestricted File Upload CWE-434 CVE ID| Pending CVSS...

grafana-CVE-2024-9264

grafana-CVE-2024-9264 This repo contains details about CVE-2024-9264. It also builds a vulnerable version of grafana, that can be pulled from ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0...

CVE-2024-6387_Checker

CVE-2024-6387Checker Excluded patched versions SSH-2.0-OpenSSH8.9p1 Ubuntu-3ubuntu0.10+ SSH-2.0-OpenSSH9.3p1 Ubuntu-1ubuntu3.6+ SSH-2.0-OpenSSH9.3p1 Ubuntu-3ubuntu3.6+ SSH-2.0-OpenSSH9.6p1 Ubuntu-3ubuntu13.3+ SSH-2.0-OpenSSH9.2p1 Debian-2+deb12u3+ SSH-2.0-OpenSSH8.4p1 Debian-5+deb11u3+...

CVE-2025-29927-scanner

Next.js Version Vulnerability Scanner by nocomp Overview This Python script is a comprehensive tool for scanning multiple subdomains to detect Next.js versions and identify potential CVE-2025-29927 vulnerabilities. It provides a detailed analysis of web applications built with Next.js across...

CVE-2019-17424

CVE-2019-17424 RCE Exploit For CVE-2019-17424 nipper-ng 0.11.10...

CVE-2024-39844

CVE-2024-39844 CVE-2024-39844 ZNC 1.9.1 modtcl RCE HexChat plugin to exploit CVE-2024-39844...

NextJS-Exploit-

NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable rang...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

WordPress N-Media Website Contact Form with File Uploader File Upload Vulnerability Analysis 1. Vulnerability Point Code Analysis Plugin file: classes/plugin.class.php, method: uploadfile function uploadfile // ... if ! empty $FILES $tempFile = $FILES 'Filedata' 'tmpname'; $targetPath = $dirPath;...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run Install the requirements: foo@bar:$ pip3 install -r requirements.txt For single username...

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

CVE-2019-15107_detection

CVE-2019-15107detection This script determinate if a server is running a vulnerable version of Webmin. Webmin =1.920 command injection - CVE-2019-15107...

CVE-2022-35411

rpc.py 0.6.0 - Remote Code Execution RCE Exploit fixed by: Liquidsky...

CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling Server-Side Template Injection in Twig Rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-28496, a Server-Side Template Injection vulnerability affecting FOSSBilling's Twig template rendering behavior...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQL Injection Details Field| Info ---|--- CVE ID| CVE-2026-37749 Type| SQL Injection → Authentication Bypass Severity| Critical CVSSv3: 9.8 Vendor| CodeAstro Product| Simple Attendance Management System Version| 1.0 Discoverer|...

CVE-2024-3094

xz-utils Vulnerability Check and Update Utility This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security...

cve-2022-1364

tested in Bromite v95.0.4638.79 armChromePublic.apk...

Detect-CVE-2024-0762

CVE-2024-0762 Detection and Malware Analysis Script Overview This script is designed to detect UEFI firmware versions and assess them for vulnerabilities related to CVE-2024-0762. Additionally, it integrates with the VirusTotal API to analyze files for malware, providing comprehensive security...

CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection

CVE-2026-25546 PoC - godot-mcp OS Command Injection Author: Mohammed Idrees Banyamer GitHub: mbanyamer Date: February 04, 2026 Exploit Title godot-mcp 0.1.1 - OS Command Injection via projectPath CVE CVE-2026-25546 CWE CWE-78 Improper Neutralization of Special Elements used in an OS Command - OS...

CVE-2024-6387_PoC

CVE-2024-6387 PoC This Bash script is designed to check if a server is running a vulnerable version of OpenSSH based on its SSH banner. It verifies if the SSH port is open and examines the banner response to determine if it matches any known vulnerable versions. Usage 1. Clone the Repo git clone...