Fetching description from NVD…
Show 1 repositories
A Broken Authentication Vulnerability found in Projectworlds' Visitor Management System
Public proof-of-concept exploits for fresh CVEs, tracked from GitHub around the clock. Filter, search and stay ahead of attackers.
monitoring live11368 results
Fetching description from NVD…
A Broken Authentication Vulnerability found in Projectworlds' Visitor Management System
Fetching description from NVD…
Fetching description from NVD…
Proof of concept for the vulnerability CVE-2018-19410
Fetching description from NVD…
CVE-2024-22939
Fetching description from NVD…
A stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.
Fetching description from NVD…
Authentication Bypass in GoAnywhere MFT
Scanning for vulnerable GoAnywhere MFT CVE-2024-0204
This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for educational and …
Fetching description from NVD…
Fetching description from NVD…
IBM i Access Client Solutions < 1.1.9.4 - Remote code execution via insecure deserialisation
Fetching description from NVD…
CVE-2023-52251 There is a Remote Code Execution vulnerability provectus/kafka-ui.
Fetching description from NVD…
Analysis of the vulnerability
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
system_bt_CVE-2023-28588
Fetching description from NVD…
Judging Management System v1.0 - Unrestricted File Upload + RCE (Unauthenticated)
Fetching description from NVD…
projectworlds' Online Admission System RCE vulnerability PoC, Categorized as CVE-2024-0783
Fetching description from NVD…
simple application with a CVE-2022-45688 vulnerability
simple application with a CVE-2022-45688 vulnerability
simple application with a (unreachable!) CVE-2022-45688 vulnerability
simple application with a (unreachable!) CVE-2022-45688 vulnerability
simple application with a (unreachable!) CVE-2022-45688 vulnerability
Fetching description from NVD…
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684
Fetching description from NVD…
Fetching description from NVD…
ColorMag <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Fetching description from NVD…
Remote Code Execution : Ivanti
Fetching description from NVD…
CVE-2024-22416 exploit experiments
Fetching description from NVD…
Fetching description from NVD…
Fetching description from NVD…
Dompdf RCE PoC Exploit - CVE-2022-28368
This repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is create the req…
An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine
Fetching description from NVD…
Django QuerySet.annotate(), aggregate(), extra() SQL 注入
SQL injection in QuerySet.annotate(), aggregate(), and extra()
A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL querie…
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject…
Sources: public PoC repositories on GitHub (nomi-sec/PoC-in-GitHub), descriptions and scores from NVD / CVE.org. Exploit code is third-party; review before running.