693 matches found
Exploit for CVE-2026-64638
CVE-2026-64638 – XSS2Shell: WordPress login page pre-authentic...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
Exploit for CVE-2026-71557
CVE-2026-71557: Go-Git path traversal PoC English versionR...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
cam-hunter
📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...
CVE-2026-50558 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
Exploit for CVE-2026-63030
WP2Shell Detector and Validation PoC !License: MIThttps:/...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
ITScape
🛡️ ITScape - Test your systems for security gaps !https:/...
Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment
This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...
Windows Notepad WebDAV UNC Reference Markdown File Generator
This Metasploit auxiliary module is a file-format generation tool intended for security testing of a CVE-2026-20841 related to Windows Notepad Markdown handling. It produces a Markdown file containing a UNC WebDAV-style path embedded as a clickable link for behavioral analysis...
glitchtip-dns-rebinding-gap-poc
GlitchTip DNS rebinding gap PoC This PoC models the DNS rebin...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 - MCPJam Inspector RCE PoC Proof of Concept ex...
Exploit for CVE-2026-8832
EXPLOIT CVE-2026-8832 !Bannerhttps://img.shields.io/badge/...
Exploit for Path Traversal in Grafana
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework...
Exploit for Prototype Pollution in Substack Minimist
CVE-2020-7598 - Prototype Pollution in minimist Disclaimer...
sql-injection
sql-injection python tool that...