kayl22

2 exploits Active since Jun 2023

CVE-2023-30258 NOMISEC CRITICAL WORKING POC

magnusbilling 6.0.0-7.2.9 - Unauthenticated OS Command Injection

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.

1 stars

CVSS 9.8

View Code

CVE-2025-8110 NOMISEC HIGH WORKING POC

Gogs < 0.13.3 - Local Code Execution via PutContents API Symbolic Link Handling

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

CVSS 8.8

View Code