Zach Hanley (Horizon3.ai)

2 exploits Active since Nov 2025

CVE-2025-9316 METASPLOIT MEDIUM ruby WORKING POC

N-central <2025.4 - Info Disclosure

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

View Code

CVE-2025-11700 METASPLOIT HIGH ruby WORKING POC

N-able N-Central Authentication Bypass and XXE Scanner

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

CVSS 7.5

View Code