CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

Exploit for CVE-2026-105482

Report on Reproducing CVE-2026-105482 Vulnerability I. Bas...

poorskeme

poorSKeme OSINT - Data Visualization - Blockchain - Awareness - Scam Install Go to this site and click on the downdload button Or go to release section. Download the ZIP file called poorSKeme.zip Unzip it, install requeriments and execute it. unzip poorSKeme.zip cd poorSKeme pip install -r...

CVE-2020-24972

So CVE-2020-24972 spans from another cve in actually. I don't remember the cve that got designated but it has to do with platformpluginpath cmdline option from qt. So in essence the problem comes from using qt, persee the option platformpluginpath . "This parameter is supposed to contain a...

CVE-2025-30406

CVE-2025-30406 ViewState Exploit PoC Overview This is a Proof-of-Concept PoC script demonstrating a ViewState deserialization exploit for CVE-2025-30406 in ASP.NET applications. It uses ysoserial to generate a malicious ViewState payload and sends it to a user-specified URL to execute a provided...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - Reflected XSS found in i-doit Open v24 and below i-doit Open v24 and below are vulnerable to Reflected XSS vulnerability. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. Description of product : i-doit is a web based Open...

allsafe-android

Allsafe - Android An Intentionally Vulnerable Android Application for Security Education Features • Screenshots • Installation • Challenges • Contributing • Support 📱 About Allsafe is an intentionally vulnerable Android application designed for security enthusiasts, pentesters, and developers to...

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

cPanel-WHM-CVE-2026-41940-AuthBypass

CVE-2026-41940 cPanel & WHM Authentication Bypass Scanner ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational purposes only. Users must comply with local laws and regulations; scanning unauthorized systems is strictly prohibited. The author is not responsible...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

VulFi

VulFi v3.0 Introduction The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For case...

BYOVD-DriverKiller

BYOVD-DriverKiller This README EN may contain errors ! ⚠️ Disclaimer : This project is strictly educational and demonstrative. It is not intended for malicious use. The goal is to learn reverse engineering methodology and the exploitation steps of a Windows driver. Here I explain the approach I...

cve-2022-33891

cve-2022-33891 Usage: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39...

CVE-2024-6028-Poc

CVE-2024-6028-Poc CVE-2024-6028 Quiz Maker method getquestionscategories image image image Poc POST /wp-admin/admin-ajax.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML,...

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

CVE-2026-4406

Gravity Forms = 2.9.28 — Unauthenticated Reflected Cross-Site Scripting via gformgetconfig formids Parameter Vulnerability Summary Field| Value ---|--- Affected Software| Gravity Forms WordPress Plugin Vendor| Rocketgenius, Inc. Vulnerability Type| CWE-79: Improper Neutralization of Input During...

CVE-2025-60736

CVE-2025-60736: SQL Injection Vulnerability in Online Medicine Guide Executive Summary This document outlines a critical SQL injection vulnerability discovered in the Online Medicine Guide web application. The vulnerability allows unauthorized database access and poses significant security risks ...

copy_fail

Copy Fail — CVE-2026-31431 CVE-2026-31431 Copy Fail is a local privilege escalation vulnerability in the Linux kernel's algifaead module AFALG subsystem. A logic flaw introduced in August 2017 allows any unprivileged local user to write 4 controlled bytes into the page cache of any readable file...