277995 matches found
zotlit-PoC
ZotLit: security advisory CVE status: requested, pendin...
supernote-obsidian-plugin-PoC
Summary CVE status: requested, pending assignment. This...
terrapod-PoC
Terrapod: security advisory CVE status: requested, pend...
code-graph-rag-PoC
code-graph-rag: security advisory CVE status: requested...
obsidian-note-toolbar-PoC
Frontmatter-Driven Arbitrary Code Execution in Note Toolbar vi...
linux-entra-sso-PoC
Summary CVE status: requested, pending assignment. This...
crw-PoC
crw: security advisory CVE status: requested, pending a...
smb-ms17-010-pentest-report
SMB MS17-010 EternalBlue Penetration Test Report A lab-base...
meterpreter-exploit-reverse-shell-on-remote-vm
Meterpreter Reverse Shell Lab VM remota ⚠️ AVISO — SOLO...
CTF-Magic
CTF-Magic A GUI-based CTF exploitation framework for Debian...
BinaryExploitationJourney
No d...
SQLI
SQL Injection Exploitation Toolkit Complete Bug Bounty • Pe...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Struts2 Vulnerability Detection and Exploitation Tool s2tool...
Shenron
Shenron 日本語版 README Shenron is a passive Rus...
Defcon-Dreamcast-Planetweb-Research
PlanetWeb Dreamcast Browser v3.0 — Eden service-subscription R...
Exploit for Insufficiently Protected Credentials in Wazuh
Automated research artifact — not the upstream project...
...[ More ]
ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...
Tenda HG21 Hardcoded Root Credentials
Firmware analysis of the Tenda HG21 XPON fiber modem revealed a hardcoded administrative account baked into the shipped firmware image. The account is granted full root privileges UID 0 and its credentials are static across devices, meaning any attacker who can reach an exposed management service...
Metabase 0.61.0 - Authenticated Remote Code Execution
Exploit Title: Metabase 0.61.0 - Authenticated Remote Code Execution Date: 2026-08-12 Exploit Author: Gutierre0x80 Vendor Homepage: https://www.metabase.com/ Software Link: https://github.com/metabase/metabase Version: = 0.58.0 = 0.59.0 = 0.60.0 = 0.61.0 Example: python3 exploit.py...
PodcastGenerator 3.2.9 Cross Site Scripting
PodcastGenerator version 3.2.9 contains a persistent cross site scripting vulnerability in the Live Items functionality. Exploit Title: PodcastGenerator 3.2.9 - Stored XSS Date: 2026-08-08 Exploit Author: Sahil Arya Vendor Homepage: https://github.com/PodcastGenerator/PodcastGenerator Software...