Tools

d34dun1c02n/cve-2023-31704

Proof-of-concept exploit for CVE-2023-31704: Incorrect access control in Sourcecodester Online Computer and Laptop Store 1.0 allows remote privilege…

compliancecontrol/cve-2024-56116

Documentation for CVE-2024-56116: a Cross-Site Request Forgery vulnerability in Amiro.CMS before 7.8.4 allowing remote attackers to create an…

s1lkys/cve-2020-29669

Macally WIFISD2

jayngng/bludit-cve-2019-17240

Bypass bludit mitigation login form and upload malicious to call a rev shell

underprotection/cve-2020-24030

Proof-of-concept for CVE-2020-24030: weak token expiration in ForLogic Qualiex v1/v3 enabling remote unauthenticated privilege escalation and…

cve-2024/cve-2024-5326-poc

Proof-of-concept exploit for CVE-2024-5326, a missing authorization vulnerability in the PostX WordPress plugin allowing authenticated attackers to…

amjadali-110/cve-2023-43317

Vertical Privilege Escalation via Session Storage by Amjad Ali (CVE-2023-43317)

karlemilnikka/cve-2024-8349-and-cve-2024-8350

Authenticated Privilege Escalation to Admin exploiting Uncanny Groups for LearnDash.

randomrobbiebf/cve-2024-50488

Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation

apeppels/cve-2022-37017

Bypass for Symantec Endpoint Protection's Client User Interface Password

randomrobbiebf/cve-2024-12252

SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)

asg-castle/cve-2023-27350

Proof-of-concept exploit for CVE-2023-27350 in PaperCut NG; exploits SetupCompleted access-control flaw to bypass authentication and execute code as…

xcr-19/cve-2023-32749

PoC for CVE-2023-32749 affecting Pydio Cells

randomrobbiebf/cve-2024-54379

Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

randomrobbiebf/cve-2024-54378

Quietly Insights <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

randomrobbiebf/cve-2024-11643

Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Update

randomrobbiebf/agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update

Agency Toolkit <= 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update

notitssixtyn3in/cve-2025-4162030

Security advisory detailing a critical authentication vulnerability (CVE-2025-4162030) in Copilot, involving user ID switching that could lead to…