1877 matches found
Exploit for OS Command Injection in Docker
🐳 ContainerBreaker - Docker Escape Exploit Simulator !Licen...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is c...
Evil-M5Project WiFi Exploration Tool
This is the latest archive as of 2025/01/02 of the Evil-M5Project, an innovative tool developed for ethical testing and exploration of WiFi networks. It harnesses the power of the M5Core2 device to scan, monitor, and interact with WiFi networks in a controlled environment. This project is designe...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
Exploit for Missing Authentication for Critical Function in Netalertx
CVE-2024-46506 This is a standalone Python implementation for...
Exploit for Deserialization of Untrusted Data in Facebook React
⚡ react2shellpoc 🚨 Educational Proof of Concept – Handle...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Scanner – CVE-2025-55182 🔐 Ferramenta educacion...
Syntecxhub_SQL_Injection_Scanner
SyntecxhubSQLInjectionScanner A...
📄 Backdoor.Win32.Netbus.170 Blind Command Execution
This Metasploit module provides historical/educational exploitation of the Backdoor.Win32.Netbus.170 trojan, originally discovered in 1998. It represents a legacy proof-of-concept rather than a modern offensive security tool...
Exploit for CVE-2025-68613
n8n Authenticated Expression Injection RCE – CVE-2025-68613...
HTTP-Smuggling
HTTP-Smuggling simpel Practical lab for learning HTTP Request...
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 S...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Toolkit & Lab Educational Only Lightweight G...
Exploit for CVE-2025-61260
OpenAI Codex CLI Vuln...
📄 FastAPI‑Based Delivery Server Proof of Concept
This proof of concept demonstrates how legacy ActiveX objects in Internet Explorer can be invoked automatically when a crafted HTML payload is delivered by a minimal HTTP server. The proof of concept shows automatic execution attempts using WScript.Shell and Shell.Application without additional...