CVE-2012-1823-exploit-for-https-user-password-web

Il file CVE-2012-1823 è un exploit uso : python3 CVE-2012-1823.py Il file CVE-2012-1823,CVE-2021-2291.py verifica se il sito è vulnerabile a CVE-2012-1823 o CVE-2021-2291 uso : python3 CVE-2012-1823,CVE-2021-2291.py comando whoami cd ls testato su Kali Linux...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Descrizione Questo repository contiene un exploit in Python per CVE-2019-16278 , una vulnerabilità in Nostromo 1.9.6 un server web. La vulnerabilità consente l'esecuzione remota di codice RCE...

CVE-2026-14990

The IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 are vulnerable to a Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows an unauthenticated user to embed arbitrary JavaScript code into the Web UI, which can alter intended functionality and potentially lead to the disc...

EUVD-2026-94986

IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...

HTTP-Basma

Fingerprinting Adattivo: Sondaggio Multi-Fase di HTTP-Basma per la Differenziazione Granulare dei Server HTTP-Basma è disponibile all'indirizzo https://httpbasma.netomize.ca/ Introduzione Nel campo della cybersecurity, identificare e caratterizzare con precisione i server web è fondamentale per i...

CVE-2024-46377

CVE-2024-46377 PoC per la vulnerabilità di upload arbitrario di file in Best House Rental Management System 1.0 Panoramica Questo script Python dimostra come sfruttare la vulnerabilità di upload arbitrario di file in Best House Rental Management System 1.0. La vulnerabilità consente a un...

CVE-2026-66479

Cross-Site Request Forgery CSRF vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6...

CVE-2026-105893

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-106600

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...

CVE-2026-105888

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2023-36845

CVE-2023-36845 Utilizzo? bash cve.sh yourfile.txt Riferimenti: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=enUS...

CVE-2024-8232

CVE-2024-8232 – Vulnerabilità di caricamento file nel Web Server SpiderControl SCADA Riepilogo Il Web Server SpiderControl SCADA è vulnerabile a caricamenti di file arbitrari non autenticati, consentendo agli aggressori di caricare script dannosi ad es. web shell e ottenere l'esecuzione remota di...

CVE-2025-55182-NSE

Motore di scripting Nmap .nse per CVE-2025-55182 https://nvd.nist.gov/vuln/detail/CVE-2025-55182 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣤⠴⠶⠶⠒⠒⠒⠒⠒⠶⠶⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣤⠶⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢶⣄⠀⣠⠴⠚⠛⠳⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠛⠉⠛⣶⠞⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠦⣄⠀⠀⠀⠀⠀⠀⠈⠻⡅⠀⠀⠀⠀⠈⢷⡀⠀⠀⠀⠀⠀⠀⠀⠀...

spring-framework-rce

spring-framework-rce CVE-2022-22965 Requisiti di ambiente 1. tomcat8 8 Utilizzo 1. Scarica springframeworkrce-0.0.1-SNAPSHOT.zip, estrailo e rinominalo in ROOT.war. 2. Sostituisci la cartella ROOT o il file ROOT.war nella cartella webapps all'interno di tomcat. 3. Spostati nella directory bin...

cve-2022-22947-godzilla-memshell

CVE-2022-22947 godzilla-memshell CVE-2022-22947 Iniettare il memory shell di Godzilla...

CVE-2025-45619

Problemdetails Kameramodell PTC310UV2 mit Firmware-Version 0.1.0000.59. Die Schwachstelle befindet sich in der Weboberfläche, die für den Zugriff auf die Kamera verwendet wird. Die Schwachstelle wurde im Rahmen eines Penetrationstests entdeckt, daher wurden bestimmte Informationen in den...

Open-Worldwide-Application-Security-Project-OWASP-

Progetto-Aperto-Mondiale-di-Sicurezza-Applicativa-OWASP- Valutazione automatizzata delle vulnerabilità web del DVWA utilizzando OWASP ZAP per identificare e analizzare falle di sicurezza critiche come l'esecuzione remota di codice CVE-2012-1823...

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105078 WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issue affects WP Store Locator: from n/a through 3.0.3...