CVE-2026-54121

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

Unauthenticated Stored Cross-Site Scripting XSS in genai/evalsvisualization.py of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 - github.com/googleapis/python-aiplatform Author: Joshua Provoste N-day Researcher & Dev Credits: Din Asotić...

CVE-2026-116672 Authlib RFC 7592 examples omit registration-access-token client binding

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

CVE-2026-116672

The Authlib Python library (versions 0.15 through 1.9.1 ) is vulnerable because the reference implementations for ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission fail to verify that the request.credential belongs to the target client. Instead, they...

CVE-2019-7238

CVE-2019-7238 RCE python3 CVE-2019-7238.py url...

cve-2024-36401-security-simulator

CVE-2024-36401 Security Incident Analysis & Detection Simulator A Python-based educational simulator that models a fictional network-security incident inspired by the real-world exploitation of CVE-2024-36401. The project demonstrates how vulnerability management, network segmentation, least...

mcpExec

mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip...

XSS2Shell

XSS2Shell ULTIMATE v3.0 WordPress Pre-Auth XSS → RCE Chain Exploit Developed by G0D150NE 📌 Features 🔍 Auto-detect XSS & WordPress version 🎯 3 Modes: Auto, XSS, Direct 📡 Callback server to capture credentials 🐚 WebShell with multiple execution methods 🔄 Persistence cron job, hidden admin,...

React2Shell

🔐 React2Shell - Next.js RSC Pollution RCE Toolkit This Python toolkit exploits Next.js React Server Components RSC prototype pollution + React.lazy-1 gadget chain for full RCE access, including interactive god shell, file upload PHP webshell dropper, and exfiltration via ?out=. Image Preview 🧾...

S.P.A.R.K--Standard-Python-ASCII-RPG-Kit-

S.P.A.R.K Version 1.0 Overview S.P.A.R.K is a light weight 2d Retro Ascii RPG Game Engine. It is build on the standard library hence no PIP install is required. The purpose of the engine is educational. I consider it an extension of my 15 mini python games tutorial series, it acts like a playgrou...

CVE-2026-34990

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-76461

CVE-2026-76461 An intentionally vulnerable, local-only Python lab for learning how unsafe YAML deserialization can become a code-execution path. It includes three difficulty levels, a patched comparison app, exploit scripts, hints, write-ups, and a small scoreboard. Safety: Run this project only ...

CVE-2026-80844

CVE-2026-80844 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

CVE-RUBY

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2023-27997-POC

Usage: python3 cve-2022-42475.py rhost rport lhost lport Exemple: python3 exploit.py 192.168.106.142 10443 192.168.106.143 9999 Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal...

CVE-2018-6961

CVE-2018-6961 - UNAUTHENTICATED COMMAND INJECTION VULNERABILITY This exploit works in Python2.7 - Not tested in any other version 1 Install Dependencies pip install request if don't have pip installed, just run apt-get install python-pip 2 Usage python exployt.py --rhost --interface --lhost --lpo...

cve-2014-6287.py

Modified version of CVE-2014-6287 python script...

CVE-2026-5430

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

Debinject

Debinject Inject malicious code into .debs MAINTAINERS Alisson Moretto | Twitter: @UndeadSec Github: @UndeadSec VIDEO DEMO CLONE git clone https://github.com/UndeadSec/Debinject.git RUNNING cd Debinject python debinject.py PREREQUISITES python 2.x dpkg dpkg-deb metasploit DISCLAIMER TO BE USED FO...

CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...