PT-2026-120609

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...

CVE-2025-11844-smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...

TYPO3-XSS-POC

TYPO3-XSS-POC Typo3 -v9.1.0 Persistent Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6905...

CVE-2014-4936

CVE-2014-4936: Malwarebytes Anti-Malware and Anti-Exploit upgrade hijacking ============= This repository contains the POC for CVE-2014-4936. A full writeup on how the vulnerability works and how to exploit it using the POC has been published here:...

CVE-2022-24124

POC for CVE-2022-24124 Exploit Code for CVE-2022-24124 aka Casdoor SQL Injection Exploit Links: ExploitDB-50792 PacketStormSecurity Expected outcome: Dump SQL database version on host running Casdoor 1.13.1 Intended only for educational and testing in corporate environments. Exploit Usage...

CVE-2019-12453

CVE-2019-12453 CVE-2019-12453 Stored XSS in MicroStrategy Web prior to 10.1 patch 10 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 In MicroStrategy Web prior to version 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. The FLTB...

libunwind_CVE-2015-3239

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

external_zlib_CVE-2022-37434

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.8 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

CVE-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety non-intrusive and its specific utility for system administrators. Here are a few options for your GitHub description and a template for your README.md. GitHub Repositor...

CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 There is no known non-vulnerable version of this component/package. It is recommended to investigate alternative components or a potential mitigating control. Mitigation 1. Desirable Try to switch from usage of com.codehaus.jackson to...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 Usage pip install -r requirements.txt python3...

CVE-2024-57784

CVE-2024-57784 Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional arguments: -h,...

ivanti-automationmanager-exploit

PoC for CVE-2022-44569 for Ivanti Automation Manager, it took Ivanti more than a year to get a fix out. Ivanti told me it's fixed in Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...

cve-2014-6287.py

Modified version of CVE-2014-6287 python script...

Fix-CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117, and try to upgrade git version. $ git clone --recursive https://github.com/shogo82148/Fix-CVE-2017-1000117.git The repository is inspired by https://github.com/greymd/CVE-2017-1000117 . To make sure that your git is safe, please clone...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Gibbon Exploit version 25.0.1 GibbonEdu Gibbon version 25.0.1 and before GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write Read More https://nvd.nist.gov/vuln/detail/CVE-2023-45878 https://herolab.usd.de/security-advisories/usd-2023-0025/ Disclaimer...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

cargo-perm

Description A new vulnerability in cargo version 1.7.0 has been found as explained here. Step by Step First you have to make sure your cargo version is vulnerable cargo --version Supose I have a cargo project with the following src/main.rs file: use numbigint::BigInt; use std::str::FromStr; //...