278184 matches found
📄 WordPress 7.0.1 Remote Code Execution
A proof of concept exploit for WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 that contain an unauthenticated remote code execution vulnerability. The exploit chains a REST API batch route confusion vulnerability with a SQL injection vulnerability to write a PHP web shell to the w...
📄 Snipe-IT 8.4.0 Authorization Bypass
A proof of concept exploit for Snipe-IT versions 8.4.0 and earlier that contain an authorization bypass vulnerability. The exploit abuses insufficient permission checks on the file upload API to allow a view-only user to upload arbitrary files to accessible objects. On deployments that permit...
📄 Trilium Notes 0.102.1 Remote Code Execution
A proof of concept exploit for Trilium Notes TriliumNext versions 0.102.1 and earlier that contain a remote code execution vulnerability. The exploit imports a crafted Trilium export archive that bypasses the application's safe import protections through a path traversal and stored cross site...
📄 DbGate 7.1.8 Remote Code Execution
A proof of concept exploit for a DbGate 7.1.8 unauthenticated remote code execution vulnerability. The exploit abuses the /runners/start endpoint by injecting JavaScript through the JSON script runner's functionName field, allowing arbitrary operating system commands to be executed and their outp...
Exploit for Code Injection in Craftcms Craft_Cms
CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit para execução...
Exploit for CVE-2026-60004
🚨 CVE-2026-60004 - RCE Critical Remote Code Execution...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...
Exploit for CVE-2026-65883
CVE-2026-65883 — Aimy Captcha-Less Form Guard clfgd Field → XOR...
Exploit for Classic Buffer Overflow in Rsyslog
CVE-2022-24903 Hands-On Lab Author: Andrew Beshay Mousa...
Exploit for CVE-2026-66066
rails-forensics-CVE-2026-66066 Tooling and method for answeri...
Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File...
Exploit for CVE-2026-61424
CVE-2026-61424 — DJ-Classifieds imageupload Task → No Auth → 3-...
LogSentry
LogSentry !CIhttps://github.com/AlperEnesErsu/LogSentry/a...
Exploit for Type Confusion in Handlebarsjs Handlebars
POC for CVE-2026-33937 this is a poc for CVE-2026-33937 that...
Exploit for CVE-2026-63077
No d...
BountySkiller
BountySkiller — hacktivity & writeup collector Flask app that...