278182 matches found
Exploit for CVE-2026-59726
CVE-2026-59726 Donate Support the maintenance of this pro...
📄 WordPress Pix for WooCommerce 1.5.0 Shell Upload
This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the lknpixforwoocommercec6savesettings function to upload arbitrary...
Forgejo Arbitrary File Read via Org-mode Include
Forgejo versions 7.0 through 15.0.5 and 16.0.0 through 16.0.1 are vulnerable to an arbitrary file read via the markup rendering API endpoint. The go-org library's default ReadFile callback ioutil.ReadFile is not overridden, allowing the +INCLUDE directive to read arbitrary files accessible to the...
CSL 1010 M2M 3G WiFi Module 2.2.1.4 (Router.cfg) Weak XOR Encryption
Summary The CSL 1010 M2M 3G WiFi Module is a portable 3G/LTE router that stores its configuration in a backup file Router.cfg. Description The device protects its configuration file Router.cfg with a weak/insecure obfuscation single-byte XOR cipher using a static key 0xEC instead of real...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Senior Rubiweb
CVE-2019-19550 ------------------------------------------...
Exploit for CVE-2026-66066
Minimal PoC for CVE-2026-66066 Working on wrappin...
Exploit for CVE-2026-66066
🚨 CVE-2026-66066 — KindaRails2Shell Pre-Authenticatio...
Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RC...
Exploit for Path Traversal in Apache Ofbiz
CVE-2024-36104-PoC Proof-of-concept for CVE-2024-36104...
Root-the-Box
EH-Stage6: Exploit Chain as Code This repository contains my...
Exploit for Improper Input Validation in Apple Ipados
CVE-2026-43813 — CloudAttestation enforceEnvironment bypass...
bugBounty-pentest-Skills
No d...
auth-bypass-hunting
No d...
Exploit for Race Condition in Microsoft
When ValidateHwnd Isn't a Gate: Root-Causing CVE-2026-54107...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
kernel-exploitation-practice
No d...
Exploit for Deserialization of Untrusted Data in Mediawiki
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry...