CVE-2024-34102

CVE-2024-34102 POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce. Overview This POC will attempt to read files from target hosts that are vulnerable to the recent Magento / Adobe Commerce CVE-2024-34102. This POC is based on this security advisory...

DahuaLoginBypass

DahuaLoginBypass Chrome extension that uses vulnerability CVE-2021-33044 to log in to Dahua IP cameras and VTH/VTO video intercom devices without authentication. For other device types NVR/DVR/XVR, etc, there exists CVE-2021-33045 which cannot be exploited with an ordinary web browser. These...

CVE-2025-24071-msfvenom

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image docker build -t telnetd-bypass . Start the container docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload USER='-f root' telnet -a 127.0.0.1 23 Output Trying 127.0.0.1... Connected to localhost...

reverse_ssh

Reverse SSH Art credit to https://www.instagram.com/smart.hedgehog.art/ Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native SCP and SFTP implementations for retrieving files from your targets Full...

CVE-2026-41940-cpanel-0day

Usage python 0day.py -f test.txt --external-only --show-all -t 10 -o testcvereport.csv Source & reference https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/ PLEASE DO NOT EXPLOIT, ONLY FIX PURPOSES, THIS IS A SCANNER...

palo-alto-panos-cve-2024-0012

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS See our blog post for technical details Affected Versions TBD Exploit authors This exploit was written by Sonny of watchTowr @watchtowrcyb...

CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML authentication bypass Unauthenticated session forgery on Citrix NetScaler ADC / NetScaler Gateway via the SAML HTTP-Redirect binding handler at GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, no workarounds. Credit for the...

wireshark-rdp

Sample RDP Wireshark capture files Here is a collection of RDP decrypted capture files, showing various scenarios. RDP with NLA, Kerberos password authentication 1 rdp-nla-kerberos-auth1.pcapng Username: [email protected] Server: IT-HELP-TEST.ad.it-help.ninja Authentication: RDP NLA with...

CVE-2026-49869

CVE-2026-49869: Kestra Unauthenticated Remote Code Execution ★PoC and Docker lab for the authentication bypass in Kestra OSS AuthenticationFilter★ Run this lab only on systems you control. The -p 8080:8080 example may publish the vulnerable API on all host interfaces; block access from other...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Injection / OS Command Injection PoC Author: Mohammed Idrees Banyamer Country: Jordan GitHub: https://github.com/yourusername Instagram: @banyamersecurity Overview This repository contains a Proof of Concept PoC demonstrating an argument...

CVE-2026-24061

CVE-2026-24061 — inetutils-telnetd Authentication Bypass A proof-of-concept exploit for the authentication bypass vulnerability in GNU inetutils-telnetd. Overview CVE-2026-24061 is a critical authentication bypass vulnerability affecting inetutils-telnetd versions 1.9.3 through 2.7. It allows a...

CVE-2024-34102

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-34102...

cpanel2shell-honeypot

cPanel2Shell Honeypot A Rust honeypot that simulates a vulnerable cPanel/WHM instance for CVE-2026-41940 cPanel2Shell authentication bypass. Overview This honeypot emulates the response sequence used by cPanel2Shell vulnerability scanners: 1. Returns a session cookie with the required...

ShatteredFTP

ShatteredFTP Dual exploiter Overview This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 Exploits a flaw in XML payload handling during user creation. Use this when your target’s web interface responds per the...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework-Toolkit Oracle WebLogic Server — SAML Authentication Bypass → Admin Takeover Exploit Framework & Mass Scanner For authorized security testing only. Legal Disclaimer & Responsible Use This tool is provided for educational and...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Bypass MFA WordPress - Exploit Lab This repository provides a lab for exploiting the CVE-2024-10924 vulnerability in WordPress, specifically to bypass two-factor authentication MFA and gain access to the WordPress administration panel. Prerequisites To deploy this lab in your...

CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Critical Authentication Bypass in pac4j-jwt - Using Only a Public Key CVSS 10 pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 Vulnerability Summary CVE-2026-29000 is a critical authentication bypass in the pac4j-jwt library versions 6.0.3 and below. When the...

CVE-2024-41958-PoC

CVE-2024-41958-PoC This is a small proof of concept for CVE-2024-41958. It is possible to bypass the TFA authentication on the admin panel. Affected versions: 2024-07 Prerequisites needed for the CVE to function: Password and username for an account without TFA. Password and username for an accou...