CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

CVE-2026-33032

CVE-2026-33032 / MCPwn Non-destructive detection tooling for the nginx-ui MCP authentication bypass known publicly as MCPwn. Ship a two-HTTP-request unauthenticated takeover of any nginx-ui instance running a vulnerable version. Table of Contents 1. Quick Facts 2. Vulnerability Overview 3...

cve-2026-29145

CVE-2026-29145 — OCSP checks sometimes soft-fail even when soft-fail is disabled Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2026-02-26 Affected Vendor: Apache Affected Product: Tomcat Severity: 9.1 CRITICAL CWE: CWE-287 Improper Authentication Status: Under Review /...

cve-2026-20127

CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127. Features IP range scanning start → end...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

marimo_CVE-2026-39987_RCE_PoC

CVE-2026-39987 - Marimo This script is ONLY for educational purposes and authorized testing. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this information. 📋 Description Marimo versions prior to 0.23.0 presen...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - Complete README.md Ready to Copy-Paste CVE-2026-23550 | Massive Modular DS Auth Bypass Exploitation Framework Author: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

CVE-2023-42115

CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. Build git clone...

telnetd_CVE-2026-24061_tester

Telnetd CVE-2026-24061 Test Script A Python security testing tool to detect vulnerability to environment variable injection in telnetd servers via the NEW-ENVIRON telnet option. Overview This script tests telnetd servers for CVE-2026-24061 , a vulnerability that allows attackers to inject...

proftpd-CVE-2026-42167-analysis

CVE-2026-42167 — ProFTPD modsql SQL Injection / Auth Bypass / RCE Independent reproduction, code-level root-cause walkthrough, and a frank exposure analysis for CVE-2026-42167 — the isescapedtext bypass in ProFTPD's modsql logging pipeline disclosed by ZeroPath Research and fixed in ProFTPD 1.3.9...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo noot@host:$...

CVE-2021-32648

CVE-2021-32648 Patch your code for October CMS Auth Bypass CVE-2021-32648 Instructions 1. Open the file vendor/october/rain/src/Auth/Models/User.php 2. Perform the patch found in these diff notes 3. Save the file Overview You are converting a loose comparison to a strict comparison by replacing t...

cve-2026-1731-scanner

CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scanner ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║ PASSIVE SCANNER —...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

CVE-2026-29000

CVE-2026-29000: Proof of Concept PoC for pac4j-jwt Auth Bypass ⚠️ Disclaimer This tool is for educational and ethical security testing purposes only. I do not and will not support threat acting in any way, shape or form. Use at your own risk. This is also my first PoC, so be nice please. This is...

CVE-2023-46805

19/01/2024 Update Updated with the latest info based on Assetnote's blog. Now three checks are executed before a status is shown, this also to better detect older versions of Avanti Blogs with analysis of the CVE: https://attackerkb.com/topics/AdUh6by52K/cve-2023-46805/rapid7-analysis...

CVE-2026-21643

CVE-2026-21643 Checker & Nuclei Template This repository contains detection tools for CVE-2026-21643 , a pre-authentication SQL Injection vulnerability in FortiClient EMS 7.4.4. The vulnerability exists in the /api/v1/initconsts and /api/v1/auth/signin endpoints, where the Site HTTP header is...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...