CVE-2026-6355

Augmentt: Cross-Tenant Access via IDOR Credits This CVE was a collaborative effort between: Raznov – GitHub: https://github.com/basraznov HelloWorld Author– GitHub: https://github.com/Penquinsecq Description A vulnerability in the web application allows unauthorized users to access and manipulate...

CVE-2021-45416

Docker RosarioSIS Installation Minimum requirements: Docker & Git working. You can pull the image from DockerHub or: 1. docker on $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visit the URL and Install the Database...

CVE-2026-10289-XSS

Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS Vulnerability Details Field| Details ---|--- Title| Hotel and Tourism Reservation System - Stored Cross-Site Scripting XSS CVE ID| Pending Assignment Vendor| code-projects.org Vendor URL|...

CVE-2025-60736

CVE-2025-60736: SQL Injection Vulnerability in Online Medicine Guide Executive Summary This document outlines a critical SQL injection vulnerability discovered in the Online Medicine Guide web application. The vulnerability allows unauthorized database access and poses significant security risks ...

CVE-2026-22849

CVE-2026-22849: Saleor lacks proper HTML sanitization in rich text fields Overview Field| Details ---|--- CVE ID| CVE-2026-22849 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products saleor/saleor Details Saleor was allowing users to modify rich text fields with HTM...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...

CVE-2025-29927-PoC

CVE-2025-29927 Research and Safe Testing Framework This repository contains research and analysis related to CVE-2025-29927. It demonstrates safe, controlled testing approaches for a path traversal/middleware misconfiguration vulnerability in web applications. ⚠️ Important: This repository is for...

CVE-2022-31814

CVE-2022-31814 Updated Exploit - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Description This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads,...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

CVE-2018-14667

CVE-2018-14667 After spending many time to understand and correctly exploit this CVE, I decided to build a repo on the RichFaces 3.X RCE bug and share the HOWTOs step by step with the community. 0x00 : Introduction on RichFaces 3.X bug On Monday, November 19, Joao F M Figueiredo published a well...

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

-CVE-2022-48150

-CVE-2022-48150 I Found the reflected xss vulnerability in shopware 5 .for more details check my poc video...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

web

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to...

CVE-2020-26732

CVE-2020-26732 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session Description SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTP...

CVE-2017-12617

CVE-2017-12617 Updated version of this repo: https://github.com/cyberheartmi9/CVE-2017-12617 Updated it to work with Python3 Run python3 CVE-2017-12617.py -u http://127.0.0.1 python3 CVE-2017-12617.py --url http://127.0.0.1 python3 CVE-2017-12617.py -u http://127.0.0.1 -p pwn python3...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...