Exploit for CVE-2007-6750

ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets. The project currently consists of two major components: a script invoking and aggregating the results of existing...

WordPress WoodMart - Multipurpose WooCommerce Theme plugin <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability

WordPress WoodMart - Multipurpose WooCommerce Theme plugin = 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability discovered by Samir El Khaouti in WordPress Theme WoodMart versions = 8.2.6...

WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...

CVE-2025-54295

CVE-2025-54295 concerns a Reflected XSS in the DJ-Reviews Joomla extension (versions 1.0–1.3.6). The vulnerability arises from a reflected cross-site scripting issue in that component, as reported across multiple sources (NVD/Red Hat/CVE list, PT Security). Affected product: DJ-Reviews (DJ-Extens...

CVE-2025-7888

creationtimestamp| type| source ---|---|--- 2025-07-20 15:10:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufr44myo62j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-50240

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...

CVE-2025-7503

creationtimestamp| type| source ---|---|--- 2025-07-15 17:42:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ltzh7v7v2f24 2025-07-21 00:52:15+00:00| seen| https://bsky.app/profile/nelnia.bsky.social/post/3lugrljszkk2x...

PT-2025-29275

Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2 Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the...

CVE-2025-7220

creationtimestamp| type| source ---|---|--- 2025-07-09 06:53:19+00:00| seen| https://bsky.app/profile/potato.software/post/3ltja64zxce2j 2025-07-09 09:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjjr4w3nx2s...

PT-2025-29370 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the Tenda FH1202. The fromNatlimit function within the /goform/Natlimit file is susceptible to a stack-based buffer overflow. This occurs through the manipulatio...

AI Agent Smart Contract Exploit Generation

We present A1, an agentic execution driven system that transforms any LLM into an end-to-end exploit generator. A1 has no hand-crafted heuristics and provides the agent with six domain-specific tools that enable autonomous vulnerability discovery. The agent can flexibly leverage these tools to...

CVE-2025-45809

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...

CVE-2025-6122

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18459 2025-06-16 15:28:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqc7ndydr2m...

Freefloat FTP Server 1.0 - Remote Buffer Overflow

Exploit Title: Freefloat FTP Server 1.0 - Remote Buffer Overflow Date: 22 may 2025 Notification vendor: No reported Discovery by: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali-273504142/ Version: 1.0 Tested on: Windows XP SP3 English - Version 5.1 Build...

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme = 2.4 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Valen - Sport, Fashion WooCommerce WordPress Theme versions = 2.4...

WordPress Krowd theme <= 1.4.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Krowd versions = 1.4.1...

WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Solar Energy versions = 3.5...

Data Flows in You: Benchmarking and Improving Static Data-Flow Analysis on Binary Executables

Data-flow analysis is a critical component of security research. Theoretically, accurate data-flow analysis in binary executables is an undecidable problem, due to complexities of binary code. Practically, many binary analysis engines offer some data-flow analysis capability, but we lack...

CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

CVE-2024-6279

A vulnerability was found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file examresults-par.php of the component Exam Results Page. The manipulation of the argument sid leads to sql injection. The...