ESXiArgs-Recover

ESXiArgs-Recover ESXiArgs-Recover is a tool to allow organizations to attempt recovery of virtual machines affected by the ESXiArgs ransomware attacks. CISA is aware that some organizations have reported success in recovering files without paying ransoms. CISA compiled this tool based on publicly...

CVE-2025-20352

CVE-2025-20352 — Desbordamiento de Pila SNMP en Cisco IOS / IOS XE Escrito de investigación por Sentinel AI Defense. Solo análisis defensivo — no se publica ningún exploit funcional ni PoC aquí. Un desbordamiento de búfer basado en pila en el subsistema SNMP de Cisco IOS e IOS XE: un paquete SNMP...

cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" Cadena RCE del núcleo de WordPress Descubridor: Searchlight Cyber via GPT-5.6 Sol Gravedad: Crítica — CVSS 9.8 CVE-2026-63030, CVSS 9.1 CVE-2026-60137 Estado: Explotado activamente — añadido al CISA KEV Alias: "wp2shell" Resumen Esta es una cadena de...

CVE-2025-3248-Langflow-RCE

CVE-2025-3248 — Langflow Unauthenticated Remote Code Execution Proof-of-Concept exploit for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow, an AI/LLM workflow-building platform. Affected versions: Langflow 1.3.0 Fixed in: 1.3.0 Vulnerability class:...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse Live CVE PoC Aggregator with Smart Search & Threat Intelligence CVE Pulse automatically discovers, scores, and indexes CVE Proof‑of‑Concepts from GitHub. It enriches them with EPSS scores and CISA KEV data, builds daily snapshots & diffs, and serves a fast, searchable static...

ScubaGear

!GitHub Releasegithub-release-imgrelease !PSGallery Releasepsgallery-release-imgpsgallery !CI Pipelineci-pipeline-imgci-pipeline !Functional Testsfunctional-test-imgfunctional-test !GitHub Licensegithub-license-imglicense !GitHub Downloadsgithub-downloads-imgrelease !PSGallery...

check-cve-2019-19781

check-cve-2019-19781 🔎🐞 This utility determines if a host appears susceptible to CVE-2019-19781. Requirements Python versions 3.6 and above. Note that Python 2 is not supported. Installation From a release: pip install...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...

pocindex

PoC Index : Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context. Find exploits by CVE, vendor, product or keyword. Compare CVSS severity, EPSS exploitation scores and CISA known-exploited status. Just landed Stars...

CVE-2026-72898-metabase-sqli

CVE-2026-72898 — Metabase unauthenticated SQL injection detector + analysis -black Unauthenticated SQL injection in Metabase via POST /api/session/resetpassword. CVSS 10.0 , in the CISA KEV catalog, exploited in the wild. An undeclared field in the password-reset request body reaches the...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local Privilege Escalation CISA KEV | CVSS 7.8 HIGH | Affects Linux kernels 4.14 – early 2026 9 years Table of Contents 1. Executive Summary 2. Risk Assessment 3. Technical Deep Dive 4. Attack Methodology — Red Team 5. Detection & Incident...

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 General Description This repository contains an educational demonstration of mitigation and detection for CVE-2026-72530 , a critical Code Injection and Sandbox Escape vulnerability in TrueConf Server. Vulnerability...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 Medium. Actively exploited and listed in CISA KEV; patch released January...

CVE-2026-21509-PoC

CVE-2026-21509 — Educational Dummy PoC for Defender Visibility ⚠️ This repository provides a harmless, non-exploit Proof of Concept. Its purpose is to support defensive research , EDR/AV visibility testing , and training. It does not exploit CVE‑2026‑21509 and contains only dummy OLE artifacts. 📝...

4jfinder.github.io

Searchable Log4j database Searchable page for CISA Log4j CVE-2021-44228 Affected Vendor & Software List, maintained by the US Cybersecurity and Infrastructure Security Agency CISA. How to use Download the index.html and cisalist.css files and run from your local computer. Hosted version at...

CVE-2025-62593-PoC

CVE-2025-62593 — Ray Remote Code Execution unauthenticated Proof-of-concept for CVE-2025-62593 , an unauthenticated Remote Code Execution vulnerability in the Ray distributed AI compute engine, abused via browser-based DNS-rebinding attacks. It was added to the CISA Known Exploited Vulnerabilitie...

vulnrichment

CISA Vulnrichment Il progetto CISA Vulnrichment è il repository pubblico dell'arricchimento da parte di CISA dei record CVE pubblici attraverso il container ADP Authorized Data Publisher di CISA. In questa fase del progetto, CISA valuta CVE nuovi e recenti e aggiunge i punti decisionali chiave...

CVE-2026-48907-

CVE-2026-48907 — Joomla JCE Editor Unauthenticated RCE Scanner & Exploit CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% A Python-based vulnerability scanner and exploitation tool for CVE-2026-48907 , a critical unauthenticated remote code execution vulnerability in the JCE Joomla Content Editor...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...