Tools

absholi7ly/cve-2025-23048-poc

Apache HTTP Server versions 2.4.35 – 2.4.63 are vulnerable to a client certificate authentication bypass when TLS 1.3 session resumption is used…

marcostolosa/cve-2025-10230

OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0

paragbagul111/cve-2024-33210

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts…

paragbagul111/cve-2024-33209

FlatPress 1.3. is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which…

sanupl/cve-2021-45745

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

sanupl/cve-2021-45744

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

toxxxaka/cve-2019-7609

New CVE-2019-7609 which works with python 13

polosss/by-poloss..-..cve-2017-20251

Insert PHP Plugin PHP Code Injection

sanupl/bludit-3.13.1-tags-field-stored-cross-site-scripting-xss

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores…

sanupl/bludit-3.13.1-about-plugin-stored-cross-site-scripting-xss

CVE-2021-45745 - A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Application stores…

grrrdog/acedcup

Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)

ismailcemunver/cve-2024-29375

CSV Injection in Addactis IBNRS 3.10.3.107

hackintoanetwork/arc-browser-address-bar-spoofing-poc

CVE-2024-25733 | ARC Browser Address Bar Spoofing PoC - iOS/iPadOS