274184 matches found
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof...
CVE
No d...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 — Live Code Corruption via Page Cache A novel...
Exploit for CVE-2026-43585
CVE-2026-43585 Overview Prior to version 2026.4.15, OpenC...
Exploit for Improper Input Validation in Microsoft
CVE-2026-27960 Overview The OpenCTI platform suffers from...
Exploit for CVE-2026-44109
CVE-2026-44109 Overview OpenClaw versions prior to 2026.4...
Exploit for Prototype Pollution in N8N
GHSA-q5f4-99jv-pgg5 — n8n XML Webhook Prototype Pollution → RC...
Exploit for Missing Authorization in N8N
GHSA-f77h-j2v7-g6mw — n8n Unauthenticated Chat Execution Hijac...
groovestrike
GrooveStrike Autonomous Penetration Testing Framework...
Ghost CMS 6.19.0 - SQLi
Exploit Title: Ghost CMS 6.19.0 - SQLi Date: 2026-03-30 Exploit Author: Maksim Rogov Exploit Licence: GPL-3.0 Software Link: https://ghost.org/ Version: Ghost =3D 3.24.0, = 3.24.0, = 6.19.0 Tested on: Ghost 6.16.1 CVE : CVE-2026-26980 !/usr/bin/env python3 import requests import re import sys...
telnetd 2.7 - Buffer Overflow
Exploit Title: telnetd 2.7 - Buffer Overflow Google Dork: N/A Date: 2026-04-03 Exploit Author: Jeff Barron jeffaf Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: inetutils-telnetd through 2.7 patch pending in next release Tested...
LuaJIT 2.1.1774638290 - Arbitrary Code Execution
-- Exploit Title: LuaJIT 2.1.1774638290 - Arbitrary Code Execution -- Date: 2026-03-29 -- Exploit Author: TaurusOmar -- Vendor Homepage: https://luajit.org/ -- Software Link: https://luajit.org/download.html -- Version: LuaJIT 2.1.1774638290 latest -- Tested on: Linux x86-64 Arch Linux --...
NocoBase 2.0.27 - VM Sandbox Escape
Exploit Title: NocoBase 2.0.27 - VM Sandbox Escape Date: 2026-03-26 Exploit Author: Onurcan Genç Vendor Homepage: https://www.nocobase.com/ Software Link: https://github.com/nocobase/nocobase Version: -u -P --cmd "id"...
ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)
Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery SSRF Date: 2026-03-25 Exploit Author: Tamil Mathi T. Vendor Homepage: https://thingsboard.io Software Link: https://github.com/thingsboard/thingsboard Version: . When ThingsBoard processes the uploaded SVG server-side, it...
MetInfo weixinreply command injection
Added: 05/07/2026 Background MetInfo is an open-source content management system CMS written in PHP and MySQL developed in China. Problem A vulnerability in the weixinreply class allows remote attackers to execute arbitrary commands by sending an API request with specially crafted EventKey and...
Bludit CMS 3.18.4 - RCE
Exploit Title: Bludit CMS 3.18.4 - RCE Date: 2026-03-28 Exploit Author: Yahia Hamza https://yh.do Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/refs/tags/3.18.2.zip Version: Bludit . The uploadFile function performs no file extension or content...
Exploit for CVE-2025-0133
CVE-2025-0133 Palo Alto PAN-OS reflected XSS in the GlobalPro...
Exploit for Incorrect Implementation of Authentication Algorithm in Google Android
╔═════════════════════════════════════════════════════════...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 — WHM/cPanel Kimlik Doğrulama Atlama Araştırma...
alika-vuln-shield
Vuln Shield Fast container vulnerability scanner that filters...