CVE-2026-76423

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit...

CVE-2024-44000

EN GenCookieSessionHijack is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies. This allows the attacker to hijack active admin sessions and gain unauthorized access to the WordPress admin dashboard. Features Extract cookies from WordPre...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

CVE-2017-14322

CVE-2017-14322 Interspire Email Marketer emailmarketer Exploit Google Dork root@kitploit: intitle:"Control Panel" + emailmarketer Exploit using Burp Suit Add a Match and Replace for Request header like below: root@kitploit: Match: ^Cookie.$ Replace: Cookie:...

CVE-2023-3460

Ultimate Member - Overview Welcome to the Ultimate Member GitHub repository! Ultimate Member is a powerful and flexible user profile and membership plugin for WordPress but Sometimes Plugins has some vulnerability and lead to website compromisation Important Notice: Please note that the version o...

CVE-2023-6875

What the exploit does Places a token that allows you to view mail. Finds the admin's username; if it can't find it, then sets "admin" as the default. It requests a link to reset the admin's password, which is emailed to the admin. Uses the token placed in the first step and examines the mail logs...

dir-3040_dos

dir-3040 Denial of Service Dir-3060 might also be affected as they share many components from same firmware. Tested on latest firmware 1.20b03a hotfix ftp server user access page by default is configured for any user with write privileges to write directly to ram instead of restricting to usb...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Framework-Toolkit de Explotación de Omisión de Autenticación SAML de Oracle WebLogic Oracle WebLogic Server — Omisión de Autenticación SAML → Toma de Control de Administrador Framework de Explotación y Escáner Masivo Solo para pruebas de seguridad autorizadas. ⚖️ Aviso Legal y Uso...

open-sammy

SAMMY Código Abierto v2 Este repositorio aloja la versión de código abierto de SAMMY, la herramienta OWASP SAMM. https://owasp.org/www-project-open-sammy/ Licencia Este proyecto está licenciado bajo la Licencia Creative Commons Attribution-ShareAlike 4.0 International. Consulta el archivo LICENSE...

HikPwn

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices. Setup instructions:...

CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass

CVE-2026-24858 | Bypass de Autenticación SSO de FortiCloud Resumen Ejecutivo FortiCloud Single-Sign-On SSO, una función habilitada por defecto de fábrica una vez que registras cualquier FortiGate/FortiManager/FortiAnalyzer, contiene una vulnerabilidad crítica de bypass de autenticación. Un atacan...

CVE-2023-28121

CVE-2023-28121 WooCommerce Payments: Unauthorized Admin Access Exploit Won't be publishing this one first... thats for sure.. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

Belsen_Group-et-exploitation-de-la-CVE-2022-40684

BelsenGroup and exploitation of CVE-2022-40684 Context On January 29, 2025, a user of the cybercriminal forum BelsenGroup published a message claiming to hold 15,000 compromised Fortinet devices, with configuration files and VPN passwords. He now offers 1,000 exclusive targets for sale on the dar...

CVE-2024-32371

CVE-2024-32371 Description Description A vulnerability identified as CVE-2024-32371 allows an attacker to elevate privileges by changing the type parameter from 1 to 0. This vulnerability enables an attacker with a regular user account to escalate their privileges and gain administrative access t...

CVE-2023-3460

CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

fortigate-cve-2022-40684-tool

Description This tool allows security professionals to identify and validate exposure to CVE-2022-40684 in FortiGate devices by interacting with exposed CMDB API endpoints. It supports enumeration of administrative users, user groups, and selective configuration extraction for analysis in...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Overview This tool is a proof-of-concept PoC exploit script for CVE-2025-59718, a critical authentication bypass vulnerability in Fortinet products e.g., FortiOS, FortiProxy, FortiSwitchManager due to improper verification of cryptographic signatures in SAML messages...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – Omisión de Autenticación en CrushFTP 🔎 Descripción General CVE-2025-2825 es una vulnerabilidad crítica de omisión de autenticación que afecta a CrushFTP , un servidor de transferencia segura de archivos ampliamente utilizado. La falla permite a atacantes remotos omitir la...

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE

CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20127 explotado desde 2023 para acceso administrativo. Este repositorio contiene un exploit de prueba de concepto funcional para CVE-2026-20127, una vulnerabilidad crítica de pre-autenticación en Cisco Catalyst SD-WAN...

CVE-2024-57778

CVE-2024-57778 Descripción : Un problema en Orbe ONetView Roteador Onet-1200 permite a un atacante remoto escalar privilegios mediante la respuesta del servidor, cambiando el código de estado 500 a 200. Versiones : Descubierto en Orbe ONetView Roteador Onet-1200 Orbe 1680210096, pero aplicable a...