CVE-2025-56311
wrathfuldiety/cve-2025-56311CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to /boaform/admin/formReboot…
educationexploitationpapers-research+3
wrathfuldiety/cve-2025-56311CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to /boaform/admin/formReboot…
m0d0ri205/wargame_re-lsCTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…
vijayshankar22/cve-2017-12542This script checks if an HP iLO server is vulnerable and can add an admin user
shoucheng3/codecentric__spring-boot-admin_cve-2022-46166_2-6-9Admin interface for monitoring Spring Boot applications with health checks, metrics, log management, JMX interaction, and thread dump viewing.
cduram/cve-2023-39144CVE-2023-39144 disclosure: cleartext password exposure in Element55 Maketime appliance admin pages, enabling privilege escalation via…
dkstar11q/cve-2022-40684Authentication bypass exploit for CVE-2022-40684 targeting FortiOS, FortiProxy, and FortiSwitchManager. Checks vulnerability and overwrites admin SSH…
rxerium/cve-2024-7593Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker…
r-pradyun/cve-2025-67315CSRF vulnerability PoC and remediation guide for employee deactivation in an admin panel. Includes CVSS scoring, attack reproduction steps, and…
rodolfomarianocy/xpl-modernwms-cve-2024-57698It is possible to view the MD5 hash of the admin password and other attributes without authentication, even after initial setup and password change.…
tamaloa/avo-cve-2024-22411Proof-of-concept exploit for CVE-2024-22411 targeting the Avo admin panel. Demonstrates vulnerability exploitation in Ruby-based web applications.
karlemilnikka/cve-2024-8349-and-cve-2024-8350Authenticated Privilege Escalation to Admin exploiting Uncanny Groups for LearnDash.
ekcrsm/cve-2024-23733Proof-of-concept exploit for CVE-2024-23733: Incorrect Access Control in Software AG webMethods Integration Server 10.15.0 allowing remote attackers…
leekenghwa/cve-2023-37755---hardcoded-admin-credential-in-i-doit-pro-25-and-belowProof-of-concept for CVE-2023-37755: hardcoded admin credentials (admin/admin) in i-doit Pro 25 and below, enabling unauthorized admin login via the…
deepak983/cve-2020-19586Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI
ahmedmansour93/event-id-193-rule-name-soc231-cisco-ios-xe-web-ui-zeroday-cve-2023-20198-🚨 Just completed a detailed investigation for Event ID 193: "SOC231 - Cisco IOS XE Web UI ZeroDay (CVE-2023-20198)" via @LetsDefend.io. The attacker…
rakeshelamaran98/cve-2026-30081Documentation of CVE-2026-30081, a high-severity cleartext transmission vulnerability in Quantum Networks QN-I-470 router firmware 6.1.1.B1, allowing…
kemrec/cve-2025-0324-axis-vapix-privescRoot-cause analysis and safety-gated verification tool for CVE-2025-0324, a privilege-escalation flaw in AXIS OS VAPIX allowing any authenticated…
yasirr10/cve-2026-29000Exploit for CVE-2026-29000, an authentication bypass in pac4j-jwt allowing attackers to forge admin tokens using only the public key.