tomcat-line-check

tomcat-line-check CVE-2026-24880 · GHSA-563x-q5rq-57qp — Does Apache's upgrade to version 11.0.20, 10.1.52 or 9.0.116 hold for you? For most people it doesn't, and there are four different ways it fails. This tool scans your artifact and tells you which one applies. root@kitploit: java -jar...

CVE-2026-27172

camel-consul ConsulRegistry Deserialization Vulnerability Reproducer CVE-2026-27172 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-consul component ConsulRegistry, tracked as CVE-2026-27172. It is the same class of issue as CVE-2024-22369 , CVE-2024-23114 a...

CVE-2026-56876-POC

This is the orignal PoC for this CVE...

CVE-2026-0257

CVE-2026-0257 testing...

gha-lab-8e9316151c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...

ROOT-APP-NPM-CVE-2026-12151 CVE-2026-12151 in undici - Patched by Root

Root has patched CVE-2026-12151 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-9679 CVE-2026-9679 in undici - Patched by Root

Root has patched CVE-2026-9679 in the undici package for Root:npm. Multiple fixed versions available...

my-cool-demo-php-code

My Cool Demo PHP Code! This repository contains a known super bad thing. What is it I wonder? Can it be related to a known CVE ID?...

CVE-2026-78234

creationtimestamp| type| source ---|---|--- 2026-09-08 12:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117235307505120412 2026-09-08 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muyxxlx3bk2z 2026-09-08 14:07:37+00:00| seen|...

CVE-2026-46680

CVE-2026-46680 CVE-2026-46680 漏洞利用...

wp2shell-scanner

wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-60137 – WordPress wp2shell vulnerability-chain scanner Authorized security-research tool with optional command-verification PoC. wp2shell-scanner detects the WordPress wp2shell vulnerability chain by validating public WordPress evidence,...

CVE-2024-30088

CVE-2024-30088...

log4j-CVE-2021-44228

Este repositorio no tiene un README...

WordPress EventON plugin <= 2.5.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin EventON versions = 2.5.7...

Exploit-CVE-2024-34070

Exploit para CVE-2024-34070 Créditos a froxlor por el descubrimiento de la vulnerabilidad. Revisa aquí para más información. Entrénate en Hack The Box. Explotación...

CVE-2026-71376

creationtimestamp| type| source ---|---|--- 2026-09-08 10:08:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyro5sxdc24 2026-09-08 17:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkwrtbhw2b...

CVE-2025-14208

creationtimestamp| type| source ---|---|--- 2026-09-08 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-07 2026-09-08 11:00:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12253a70-6b5a-44ad-b30d-9849e4011cb8 2026-09-09...

MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting

MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress versions up to 3.1.2 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in 'mwpsetuppurchaseusername' parameter, letting unauthenticated attacke...

PowerJob List - Authorization Bypass

PowerJob = 5.1.2 contains a broken access control caused by missing authorization in /user/list function, letting remote attackers access unauthorized resources, exploit requires no special privileges. id: CVE-2025-11580 info: name: PowerJob List - Authorization Bypass author: DhiyaneshDk severit...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...