
cosmicsting-validator
CosmicSting (CVE-2024-34102) POC / Patch Validator

CosmicSting (CVE-2024-34102) POC / Patch Validator
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract…

Inspect all of your Heroku apps for vulnerable versions of the JSON gem

Scans Heroku applications for a critical Rails remote code execution vulnerability (CVE-2013-0333) and identifies unpatched instances requiring…

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

DifuseHQ Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient…

Exploit for CVE-2022-22965 (Spring4Shell) targeting Spring Framework versions vulnerable to remote code execution via classLoader manipulation.

Writeup of a Denial of Service vulnerability in the vBulletin 3.8.7 friends list.

Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive…

DATAGERRY Broken Access Control

YARPP <= 5.30.10 - Missing Authorization

AzureGoat : A Damn Vulnerable Azure Infrastructure

GCPGoat : A Damn Vulnerable GCP Infrastructure

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Proof-of-concept for CVE-2023-36643: an incorrect access control vulnerability in ITB-GmbH TradePro v9.5 that allows remote attackers to enumerate…

Proof-of-concept exploit for CVE-2024-22889, an incorrect access control vulnerability in Plone CMS v6.0.9 allowing remote attackers to view and list…