CVE-2026-23744

CVE-2026-23744 – Proof of Concept The Python script in this PoC sends a simple HTTP request to the target host running MCPJam inspector version replace with your listening port Then, open another shell, and run the PoC: cd CVE-2026-23744 python3 exploit.py References REC in MCPJam inspector due t...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CVE-2019-12181

CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...

CVE-2026-9082

Drupal CVE-2026-9082 Scanner Semi-passive scanner that detects Drupal installations potentially vulnerable to CVE-2026-9082 PostgreSQL SQL injection. No SQL payloads sent. No state-changing requests. Vulnerable Versions Branch| Affected| Fixed ---|---|--- 10.4.x| 8.9.0 — 10.4.9| 10.4.10 10.5.x|...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

PT-2026-120609

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...

Fedora 44 : xen (2026-839be67202)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-839be67202 advisory. x86/AMD: ineffectual Zenbleed workaround XSA-515, CVE-2026-79608 x86: XPTI may break on huge-memory systems XSA-516, CVE-2026-79609 grant-table:...

CVE-2025-11844-smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...

TYPO3-XSS-POC

TYPO3-XSS-POC Typo3 -v9.1.0 Persistent Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6905...

CVE-2014-4936

CVE-2014-4936: Malwarebytes Anti-Malware and Anti-Exploit upgrade hijacking ============= This repository contains the POC for CVE-2014-4936. A full writeup on how the vulnerability works and how to exploit it using the POC has been published here:...

CVE-2019-12453

CVE-2019-12453 CVE-2019-12453 Stored XSS in MicroStrategy Web prior to 10.1 patch 10 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 In MicroStrategy Web prior to version 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. The FLTB...

libunwind_CVE-2015-3239

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

external_zlib_CVE-2022-37434

ZLIB DATA COMPRESSION LIBRARY zlib 1.2.8 is a general purpose data compression library. All the code is thread safe. The data format used by the zlib library is described by RFCs Request for Comments 1950 to 1952 in the files http://tools.ietf.org/html/rfc1950 zlib format, rfc1951 deflate format...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

CVE-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety non-intrusive and its specific utility for system administrators. Here are a few options for your GitHub description and a template for your README.md. GitHub Repositor...

CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 There is no known non-vulnerable version of this component/package. It is recommended to investigate alternative components or a potential mitigating control. Mitigation 1. Desirable Try to switch from usage of com.codehaus.jackson to...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

CVE-2024-39713

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. Links: https://nvd.nist.gov/vuln/detail/CVE-2024-39713 https://hackerone.com/reports/1886954 Usage pip install -r requirements.txt python3...

CVE-2024-57784

CVE-2024-57784 Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional arguments: -h,...

ivanti-automationmanager-exploit

PoC for CVE-2022-44569 for Ivanti Automation Manager, it took Ivanti more than a year to get a fix out. Ivanti told me it's fixed in Ivanti Automation 2023.4... https://github.com/rweijnen/ivanti-automationmanager-exploit/assets/7575747/818f11e1-0e86-4d91-8ce1-8949e45cfd8c...