CVE-2025-4094-POC

WordPress Plugin Digits OTP Bypass CVE-2025-4094 Overview This script is an exploit for the WordPress Plugin Digits versions -p -i OPTIONS Arguments -u, --url: Required Target URL e.g., https://example.com/wp-admin/admin-ajax.php -p, --phone: Required Target phone number digits only -i,...

CVE-2025-55449

CVE-2025-55449 - AstrBot Remote Code Execution RCE Vulnerability Overview This repository contains a proof-of-concept exploit for CVE-2025-55449 , a critical Remote Code Execution RCE vulnerability in AstrBot. The vulnerability allows an attacker to execute arbitrary code on the target system by...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet is a production-grade Zero-Trust Network Access ZTNA framework specifically engineered for Small Office/Home Office SOHO environments. By orchestrating a secure, identity-aware VPN overlay utilizing the WireGuard protocol, SafeNet provides granular control...

CVE-2018-15473

You will need Python 2.7 to use this exploit. install all the module given bellow in python 2.7 Like: python2 -m pip install numpy python2 -m pip install paramiko python2 -m pip install property To test single username use this command: python ./sshuserenumeration.py -u Like: python...

bitbucket-test

Docker container to investigate CVE-2022-36804 Recreating a remote code execution vulnerability where Bitbucket fails to sanitize user input, which allows attackers to inject Git flags and execute code remotely. This repository documents how I reproduced the vulnerability CVE-2022-36804, an issue...

CVE-2023-27524

CVE-2023-27524 Tool for finding CVE-2023-27524 Apache Superset - Authentication Bypass...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...

kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Blind SQL Injection to Remote Code Execution Port 2083 → userRes POST → INTO DUMPFILE → Port 2031 Webshell → cwpsvc 🔴 Vulnerability Overview CVE-2026-57517 is a critical pre-authentication blind SQL injection in Control Web Panel CWP versions ≤ 0.9.8.1224. The...

CVE-2020-28148

CVE-2020-28148 A common way to attack WIFI, not only applicable to Xinrui a subsidiary of Sangfor WIFI products. Through multiple offensive and defensive engagements, it has been found that this exploitation method can bypass multiple AC vendors. This article is intended to disclose the...

CVE-2025-27580

CVE-2025-27580: Unauthenticated Account Takeover in NIH BRICS NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card C...

CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset

CVE-2017-8295-WordPress-4.7.4---Unauthorized-Password-Reset Information on the vulnerability Wordpress has a password reset feature that contains a vulnerability which might in some cases allow attackers to get hold of the password reset link without previous authentication. Such attack could lea...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...

CVE-2026-45156-POC

Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...

CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution Property| Value ---|--- CVE ID| CVE-2025-55182 CVSS| 10.0 Critical CWE| CWE-502: Deserialization of Untrusted Data Type| Pre-Auth RCE Affected Versions Component| Affected Versions ---|--- Reac...

cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized red team / pentest operations only. This repository contains a minimal checker for CVE-2026-20896, an authentication bypass in official Gitea Docker images up to and including 1.26.2 when reverse-proxy authentication is enabled. What...

cve-2026-23550-poc

CVE-2026-23550 PoC A small Bash tester for CVE-2026-23550. It requests the affected WordPress modular connector login endpoint, checks whether a wordpressloggedin cookie is issued, and attempts to confirm access to the admin dashboard. Warning: Use this tool only against systems you own or have...

CVE-2025-25257

Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...