CVE-2026-19632-POC

CVE-2026-19632 — TranslatePress Unauthenticated Account Takeover Unauthenticated Account Takeover via Password Reset Link Disclosure Contact TG:@soldout0O 💙 Support the Project If you appreciate my work, consider supporting the project via USDT TRC20: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Professional Intelligence & Reconnaissance Tool for Apache HTTP/2 Double-Free Vulnerability. 📌 Overview CVE-2026-23918 CVSS 8.8 is a critical memory corruption flaw in Apache HTTP Server 2.4.66. This auditor is designed to safely fingerprint targets and assess...

cve-2026-60004

CVE-2026-60004 — Gitea = 1.27.0 Pre-Auth Remote Code Execution Description CVE-2026-60004 is a critical vulnerability CVSS 9.8 in Gitea that allows unauthenticated remote code execution via the /api/v1/repos/owner/repo/diffpatch endpoint. Tools 1. Detector detector.py Detects whether a Gitea...

CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE

📡 Hyland OnBase Timer Service Unauthenticated RCE Mohammed Idrees Banyamer Security Researcher Jordan 🇯🇴 🧨 Overview...

CVE-2026-3395-MaxSite-CMS-Unauthenticated-RCE

CVE‑2026‑3395 — MaxSite CMS Unauthenticated Remote Code Execution...

blue-team-capstone

Blue Team Capstone Project Overview This project is a Blue Team cybersecurity capstone focused on vulnerability assessment, risk evaluation, and remediation. The assessment focuses on CVE-2009-0658 , a vulnerability affecting Adobe Acrobat and Reader. The goal of the project was to evaluate the...

CVE-2026-29000

CVE-2026-29000: pac4j-jwt JwtAuthenticator authentication bypass Full buildout: writeup, Java in-process PoC, Python token-forge CLI and library, tests. Summary CVE: CVE-2026-29000 CVSS 10, CWE-347 Affected: pac4j-jwt 4.5.9 / 5.7.9 / 6.3.3 when using JWE + signature config Issue: JWE-wrapped...

CVE-2026-28363

🔴 CVE-2026-28363 — Security Advisory root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗ ██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝ ███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████...

CVE-2026-21962-o

CVE-2026-21962 It is my first CVSS 10.0 CVE! 👍✅💯㊗️🀄️🈵 Summary Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. IMPORTANT: Message from orignal Finder Consider the potential damage to...

CVE-2026-3055-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection Tool ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission from the owner. 📋 Description Detection tool for CVE-2026-3055 that identifies Citrix NetScaler ADC and...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 es una vulnerabilidad crítica CVSS 9.8 en PDF.js, que permite la ejecución arbitraria de código JavaScript debido a comprobaciones de tipo insuficientes en el objeto FontMatrix dentro de archivos PDF. Asistente de Explotación CVE-2024-4367: Guía de Usuario...

EpSiLoNPoInT-

!/usr/bin/env python3 """ TSAR-EXEC v7.1 + EpSiLoNPoInTFuCK v5.1 - Complete README.md Ready to Copy-Paste CVE-2026-23550 | Massive Modular DS Auth Bypass Exploitation Framework Author: EpSiLoNPoInT | Version: 7.1-GOD | Android 24h Coding | 08/02/2026 """...

Mass-CVE-2026-23550-Exploit

🔥 CVE-2026-23550 Modular DS Scanner Multi-threaded Python scanner for CVE-2026-23550 CVSS 10.0 WordPress Modular DS plugin ≤2.5.1 vulnerability affecting 40k+ sites. Detects unauthenticated admin takeover via getLogin bypass with full wp-admin access verification. Features ✨ root@kitploit: 🔥 Full...

cve-2026-1731-scanner

CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scanner root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...

CVE-2026-1281-Ivanti-EPMM-RCE

CVE-2026-1281 & CVE-2026-1340 - Ivanti EPMM Pre-Auth RCE ⚠️ DISCLAIMER: This PoC is provided solely for educational and security research purposes. Unauthorized use is illegal. 🎯 Description Complete Proof of Concept PoC for exploiting the CVE-2026-1281 and CVE-2026-1340 vulnerabilities affecting...

openclaw-vuln-report

OpenClaw Vulnerability Analysis Report Chinese Interpretation of Security Vulnerability CVE-2026-25253 Read Online GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ Vulnerability Summary CVE : CVE-2026-25253 Score : CVSS 8.8 High Type : Cross-Site WebSocket Hijacking Impact :...

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated RCE HoGent CyberSecurity II — Network Pentesting & Exploitation NPE Academic year 2025–2026 Overview This repository contains a complete lab environment and exploitation demonstration of CVE-2026-33017 , a critical unauthenticated Remote Code Execution RC...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua Buffer Overflow Exploitation 📋 Overview Apache modlua Buffer Overflow Exploitation is an advanced, enterprise-grade exploitation platform for - a critical buffer overflow vulnerability in the Apache HTTP Server 2.4.x module. This framework provides comprehensive...

CVE-2026-66066

🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...