LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

Exploit Title: LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting CVE: CVE-2026-61876 Date: 2026-07-13 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog : https://banyamersecurity.com/blog/...

Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Exploit Title: PlanyoOnlineReservationSystem 3.0 - Arbitrary File Read via SSRF Date: 12-07-2026 Exploit Author: Balachandar Gowrisankar Vendor Homepage: https://www.planyo.com/wordpress-reservation-system/ Software Link: https://plugins.svn.wordpress.org/planyo-online-reservation-system/tags/2.9...

mcp-server-kubernetes 3.8.x - Argument Injection

!/usr/bin/env python3 Exploit Title: mcp-server-kubernetes 3.8.x - Argument Injection CVE: CVE-2026-61459 Date: 2026-07-13 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog :...

CorgetGpsDget 2_3.2 Command Injection

CorgetGpsDget version 23.2 suffers from a remote command injection vulnerability. Exploit Title: CorgetGpsDget 23.2 - OS Command Injection Date: 2026-07-05 Exploit Author: Bytetobreach Fofa server: "PTTServer" Vendor Homepage: http://corget.com Version: GpsDget 23.2, build 2020-09-01 dget.version...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock-X200 v1.0!Versionhttps://img.shields.io/badge/ver...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock APK Standalone APK: CVE-2026-43499 – GhostLock...

pt-esign__Damn-vulnerable-sca

SCA Goat Navigating SCA Vulnerabilities, Empowering Mastery...

pt-platform__java-goof-1

Java Goof A vulnerable demo application, initially based on...

pt-identity__vulnerable-app

Spring4Shell Vulnerable Demo App This repository creates a doc...

dts-data__damn-vulnerable-tiny-web-server

Damn Vulnerable Tiny Web Server A deliberately insecure webse...

pt-platform__container-breaking-in-goof

Goof - Snyk's application demo for breaking into containers P...

dts-data__damn-vulnerable-web-server

Damn Vulnerable Web Server Vulnerable Web Server written in...

dts-data__Linux-Damn-Vulnerable-Thick-Client

Linux-Damn-Vulnerable-Thick-Client A Thick client app collect...

pt-identity__AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure !1https://u...

pt-clm__php-goof

No d...

pt-platform__DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

Exploit for Code Injection in Pgadmin Pgadmin_4

No d...

Exploit for Code Injection in Pgadmin Pgadmin_4

No d...

Exploit for CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIM...