unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
WooCommerce 1.5.0 Unauthenticated Arbitrary File Upload
WooCommerce 1.5.0 Unauthenticated Arbitrary File Upload# Exploit Title: WooCommerce 1.5.0 - U...
2026-8-21 19:29:18 | 阅读: 30 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
woocommerce
pix
php
wordpress
c6
PCMan 2.0.7 Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0.7 - Buffer Overflow# Google Dork: [if applicable]# Date: 05/...
2026-8-21 19:29:6 | 阅读: 33 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
x8a
xa6
x1b
x24
xda
Joomla Extension 4.1.4 PHP Object injection
Joomla Extension 4.1.4 PHP Object injectionExploit Ttile: Joomla Extension 4.1.4 - PHP Object inje...
2026-8-12 18:47:48 | 阅读: 40 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
php
pad
payload
joomla
serialized
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting
LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting#!/usr/bin/env python3# Exploit Title:...
2026-8-12 18:46:48 | 阅读: 41 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
duid
txid
ia
luci
ifindex
strongSwan 5.9.13 DoS
# Exploit Title: strongSwan 5.9.13 - DoS# Date: 2026-05-13# Exploit Author: Lukas Johannes Moelle...
2026-8-12 18:46:23 | 阅读: 43 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
strongswan
radius
dae
charon
2026
OrkesConductor 3.30.2 Unauthenticated Remote Code Execution
OrkesConductor 3.30.2 Unauthenticated Remote Code Execution#!/usr/bin/env python3# Exploit Title:...
2026-8-12 18:45:28 | 阅读: 57 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
conductor
wid
remote
python3
wf
iOS Bluetooth PAN - Zero-Cost Ethernet Gateway (USB Port 62078)
# Exploit Title: iOS Bluetooth PAN - Zero-Cost Ethernet Gateway (USB Port 62078)# Date: 2026-06-23...
2026-8-12 18:45:4 | 阅读: 54 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
pan
62078
network
adapter
f4r3sx0
Apache Gravitino 1.2.1 SSRF
Apache Gravitino 1.2.1 SSRF# Exploit Title: Apache Gravitino 1.2.1 - SSRF # Google Dork: N/A# Da...
2026-8-12 18:44:38 | 阅读: 49 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
ssrf
oob
gravitino
metalake
8090
MODX.3.2.1 TLS cookie without secure flag set - COOKIE PHPSESSID HIJACK
MODX.3.2.1 TLS cookie without secure flag set - COOKIE PHPSESSID HIJACK# Titles: MODX.3.2.1 TLS co...
2026-8-2 15:18:8 | 阅读: 50 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
modx
attacker
pwnedhost
2026
Linux Kernel 7.0-7.0.8 & 7.0-rc-7.0-rc7 - Use After Free Exploit
CVE-2026-46215 Linux Kernel Use After Free Exploit - More Stable & Reliablefor Linux 7.0-7.0.8 &...
2026-8-2 15:17:44 | 阅读: 44 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
46215
2026
ArcadeDB < 26.7.2 Cross-Database Authorization Bypass (IDOR)
ArcadeDB < 26.7.2 Cross-Database Authorization Bypass (IDOR)#!/usr/bin/env python3# Exploit Title...
2026-8-2 15:16:52 | 阅读: 44 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
arcadedb
database
python3
bypass
banyamer
Joomla Page Builder CK < = 3.5.10 - Unauthenticated Arbitrary File Upload (RCE)
Joomla Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload (RCE)#!/usr/bin/env pytho...
2026-7-19 09:36:19 | 阅读: 52 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
php
hits
joomla
fonts
Microsoft Edge < = 150.0.4078.48 (Chromium-based) Type Confusion RCE
#!/usr/bin/env python3# Exploit Title: Microsoft Edge <= 150.0.4078.48 (Chromium-based) Type...
2026-7-19 09:35:56 | 阅读: 53 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
microsoft
2026
58289
confusion
python3
Linux Kernel 7.0 DRM UAF LPE Exploit
Exploit Repo : https://github.com/bluedragonsecurity/CVE-2026-46215-EXPLOITThis is and exploit f...
2026-7-19 09:35:28 | 阅读: 54 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
patient
2026
46215
warned
nulled
Langflow 1.3.0 Remote Code Execution
Langflow 1.3.0 Remote Code Execution# Exploit Title: Langflow 1.3.0 - Remote Code Execution # Fo...
2026-7-19 09:34:58 | 阅读: 51 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
langflow
client
username
2026
httpx
Krayin CRM v2.2.x Authenticated Remote Code Execution
Krayin CRM v2.2.x Authenticated Remote Code Execution# Exploit Title: Krayin CRM v2.2.x - Authen...
2026-7-19 09:34:49 | 阅读: 47 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
xsrf
client
krayin
2026
httpx
PraisonAI CodeAgent < = 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution
PraisonAI CodeAgent <= 1.6.77 Remote Code Execution (RCE) via Unsandboxed LLM Code Execution#...
2026-7-19 09:34:40 | 阅读: 51 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
codeagent
praisonai
python3
llm
XenForo XSS CVE Scanner — Passive Detection Tool for CVE-2026-35055, CVE-2026-35054, CVE-2026-35057
XenForo XSS CVE Scanner — Passive Detection Tool for CVE-2026-35055, CVE-2026-35054, CVE-2026-35057...
2026-7-3 15:40:56 | 阅读: 79 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
lightbox
xenforo
remote
2026
php
KNX visualisering - Broken Access Control
KNX visualisering - Broken Access Control# Exploit Title: KNX visualisering - Broken Access C...
2026-7-3 15:40:41 | 阅读: 60 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
knx
attacker
vis
scada
7-Zip < = 26.02 - Mark-of-the-Web (MotW) Bypass via RAR5 Alternate Data Stream Name Collision
#!/usr/bin/env python3# Exploit Title: 7-Zip <= 26.02 - Mark-of-the-Web (MotW) Bypass via RA...
2026-7-3 15:40:5 | 阅读: 74 |
收藏
|
CXSECURITY Database RSS Feed - CXSecurity.com - cxsecurity.com
rar5
7z
sevenzip
bypass
motw
Previous
2
3
4
5
6
7
8
9
Next