
cosmicsting-validator
CosmicSting (CVE-2024-34102) POC / Patch Validator

CosmicSting (CVE-2024-34102) POC / Patch Validator
Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596)

PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, <= 3.13.5 Core


CVE-2015-1635

PoC CVE-2024-7646

Proof-of-concept exploit for CVE-2022-45265 targeting Sourcecodester Sanitization Management System 1.0 via unauthenticated user modification through…

从老外那里下载了该漏洞的修复工程,无奈依赖包实在是太多下不下来,选取其中axis工程打成jar包后发现已成功修复项目的漏洞,有需要的亲可以下载重新打jar包替换即可。 clone后用idea打axis这个jar包即可

Solar Appscreener XXE

Proof-of-concept exploit for CVE-2024-25170, demonstrating an access control bypass in Mezzanine CMS v6.0.0 via Host Header manipulation.

Apache Superset 默认SECRET_KEY 漏洞(CVE-2023-27524)

Proof-of-concept for CVE-2020-26527: demonstrates a CORS misconfiguration in Damstra Smart Asset 2020.7 API that trusts arbitrary origins, allowing…

Patch for CVE-2024-10449: replaces vulnerable loginAction.php with a hardened version that requires database configuration for secure authentication.

String MVC Framework Path-Traversal proof of concept. CVE-2014-3625

Global Fix for Wordpress CVE-2018-6389

CVE-2024-4367 mitigation for Odoo 14.0