CVE-2026-100174 Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names

The AIL Framework tag selector component var/www/static/js/tags.js is vulnerable to stored cross-site scripting XSS. A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers e.g., or in the tag name. When another authenticated user opened a...

LyLme-Spage - Arbitary File Upload

An arbitrary file upload vulnerability in the component /include/file.php of lylmespage v1.9.5 allows attackers to execute arbitrary code via uploading a crafted file. id: CVE-2024-34982 info: name: LyLme-Spage - Arbitary File Upload author: DhiyaneshDk severity: high description: | An arbitrary...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

WordPress XML Sitemap Generator for Google plugin before 2.0.4 contains a cross-site scripting vulnerability that can lead to remote code execution. It does not validate a parameter which can be set to an arbitrary value, thus causing cross-site scripting via error message or remote code executio...

CVE-2025-51471-POC

CVE-2025-51471 - Exposición de Token entre Dominios de Ollama - PoC Autor: ajtazer 🔥 Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-51471 , una vulnerabilidad de Exposición de Token de Autenticación entre Dominios que afecta a todas las versiones de Ollama incluyendo l...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Fallo de Copia PoC en PHP root@kitploit: www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE Un usuario autenticado con privilegios bajos puede explotar una vulnerabilidad de inyección de comandos para lograr ejecución de código como www-data y escalar privilegios a root debido a reglas sudo débiles. QuickBox Pro v2.1.8 y versiones anteriores son...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students and security researchers. Quick start...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Modo de Uso root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

EUVD-2026-86017

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

Exploit for Authorization Bypass Through User-Controlled Key in Traefik

CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — Authentication b...

CVE-2020-11108-PoC

CVE-2020-11108-PoC En este repositorio hay dos PoCs. cve-2020-11108-rce.py te dará una shell como el usuario www-data. root-cve-2020-11108-rce.py te dará una shell y escalará privilegios a root. Nota: Esto es destructivo, ya que debemos sobrescribir teleporter.php. Para una explicación...

-CVE-2022-1609

CVE-2022-1609 PoC en Bash para CVE-2022-1609 WordPress Weblizar Backdoor ¿Cómo instalar? root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh ¿Cómo usarlo? root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 +...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon root@kitploit: sudo systemctl start docker.service Start Docker...

CVE-2022-1609

CVE-2022-1609 针对 CVE-2022-1609 WordPress Weblizar 后门的 Bash poc 如何安装 ？ root@kitploit: wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 如何使用 ？ root@kitploit: NullBrunk$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:808...

OESA-2026-3969 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization...