Tools

undefinedmode/cve-2019-12453

Authenticated XSS in Microstrategy Web - Versions prior to 10.1 patch 10

balajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

kac89/cve-2024-7124

Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint…

paragbagul111/cve-2024-33210

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts…

paragbagul111/cve-2024-25412

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…

paragbagul111/cve-2024-33209

FlatPress 1.3. is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which…

paragbagul111/cve-2024-25411

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…

abbisqq/cve-2025-28355

It was identified that the https://github.com/Volmarg/personal-management-system application is vulnerable to CSRF attacks.

geraldoalcantara/cve-2023-51281

Multiple cross-site scripting (XSS) vulnerabilities in /customer_support/ajax.php?action=save_customer in Customer Support System 1.0 allow…

mayaofveil/cve-2005-0575

Exploit for KNet 1.04b Web Server Buffer Overflow SEH

mfdev-solution/exploit-cve-2017-5638

this exemple of application permet to test the vunerability CVE_2017-5638

andreamammano89-maker/cve-2021-42013_821311

Exploits Apache HTTP Server CVE-2021-42013 for path traversal and CGI-based remote code execution during penetration testing.

bsdrip/cve-2026-40179-poc

Minimal Python PoC for CVE-2026-40179: injects a malicious metric name via unauthenticated Prometheus remote_write to trigger stored XSS in the web…

randomrobbiebf/cve-2026-2413

Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path

bo0om/cve-2017-7089

Webkit uxss exploit (CVE-2017-7089)

immunit/cve-2018-11759

Proof of concept showing how to exploit the CVE-2018-11759