CVE-2024-5124

deploy victim server: Install docker Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc sudo chmod a+r...

CVE-2026-30403

There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read any file on the victim's server...

CVE-2026-30403

The wgcloud distributed server monitoring and operation system, versions v3.6.3 and before , is affected by an arbitrary file read vulnerability. This flaw exists within the test connection function of the backend database management component, which allows an attacker to read any file on the vic...

coolLabs Coolify Remote Command Execution Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on a victim's server...

CVE-2024-7314

anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on...

CS Cart 1.3.3 Cross Site Scripting

Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If "install.php" was not removed after installation simply make an html file with the following code and replace by the PATH to...

CS-Cart 1.3.3 - install.php Cross-Site Scripting

CS-Cart 1.3.3 - install.php Cross-Site Scripting Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If "install.php" was not removed after installation simply make an html file with t...

Baby Web Server 2.7.2 - found Denial of Service

Baby Web Server 2.7.2 - found Denial of Service !/usr/bin/env python Author:Asheesh Kumar Mani Tripathi Created:Asheesh Kumar Mani Tripathi import socket print "" print "Baby Web Server 2.7.2 Vulnerbility found Denial of Service" print "Change IP to Victim Server s.connect127.0.0.1,80" print...