15842 matches found
Wapiti Web Application Vulnerability Scanner 3.2.8 Source Code
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...
PT-2025-43760
Name of the Vulnerable Software and Affected Versions ajayrandhawa User-Management-PHP-MYSQL web affected versions not specified Description A security flaw exists in ajayrandhawa User-Management-PHP-MYSQL web. The issue involves cross-site request forgery, allowing remote attackers to perform...
web-application-vulnerability-scanner
web-application-vulnerability-scanner A Web Application Vul...
cybersec-ids
cybersec-ids Full-stack AI-driven Web App Intrusion Detection...
Exploit for CVE-2025-63307
CVE-2025-63307 – Authenticated Stored Cross-site Scripting XS...
Exploit for CVE-2025-61155
PoC exploit for CVE-2025-61155, a vulnerability in an unspecifie...
Xss-Wordlist
It is an offensive tool for web application security testing. Th...
EUVD-2025-35589
my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a...
CVE-2025-60783
There is a SQL injection vulnerability in Restaurant Management System DBMS Project v1.0 via login.php. The vulnerability allows attackers to manipulate the application's database through specially crafted SQL query strings...
Exploit for Code Injection in Microsoft
It is an offensive tool for web exploitation. The repository con...
pocFlexiPwn
It is an offensive tool for web exploitation. The repository con...
CVE-2025-56700
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
CVE-2025-61935
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-55669
When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-24833
CVE-2025-24833 is a stored XSS vulnerability in desknet’s NEO, affecting version range V4.0R1.0–V9.0R2.0. The issue allows execution of arbitrary JavaScript in a user’s browser via a stored payload. The connected Red Hat (RH:CVE-2025-24833) and other feeds confirm the same description. No exploit...
CVE-2025-56700
The Centrax Open PSIM platform by Base Digitale Group spa version 6.1 contains a Boolean SQL injection vulnerability within its web application. This flaw allows a user with low-level privileges and platform access to execute arbitrary SQL commands by manipulating the datafine parameter. While th...
PT-2025-42496
Name of the Vulnerable Software and Affected Versions Centrax Open PSIM version 6.1 Description A Boolean SQL injection issue exists in the web application of Centrax Open PSIM. A user with low-level privileges and platform access can execute arbitrary SQL commands through the datafine parameter...
CVE-2025-61935
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-61935
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...