Every new exploit,
on the radar.

Unauthenticated access in the default configuration of the D-Link DWR-M972V

CVE-2023-24706

Pardus My Computer Os Command Injection

CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability

Event monster <= 1.4.3 - Information Exposure Via Visitors List Export

Partners <= 0.2.0 - Unauthenticated PHP Object Injection

VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection

Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

CVE-2024-53691

CVE-2024-50404

Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation

he Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation (Versions Up to and Including 1.8.4)

Exploit for the vulnerability CVE-2024-43044 in Jenkins

The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against known vulnerable version r…

CVE-2024-43044的利用方式

This repository provides a workaround preventing exploitation of SECURITY-3430 / CVE-2024-43044

CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection

CVE-2024-50603-nuclei-poc

PfSense Stored XSS lead to Arbitrary Code Execution exploit

based on [EQSTLab](https://github.com/EQSTLab)

Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection

https://www.freebsd.org/security/advisories/FreeBSD-SA-19:11.cd_ioctl.asc

WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection

RSVP ME <= 1.9.9 - Unauthenticated SQL Injection

Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation

WP REST API FNS <= 1.0.0 - Privilege Escalation

An exploit for Four-Faith routers to get a reverse shell

This is the exploit of CVE-2019-17240.

Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC

Bludit 3.9.2 - Auth Bruteforce Bypass CVE:2019-17240 Refurbish In bash

Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240

Better version of rastating.github.io/bludit-brute-force-mitigation-bypass/

Bypass bludit mitigation login form and upload malicious to call a rev shell

Bludit 3.9.2 - Auth Brute Force Mitigation Bypass. CVE-2019-17240

WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_exp…