OpenSSH CVE-2026-123158 SSHole auth bypass

CVE-2026-123158 SSHole: OpenSSH on musl Linux without PAM may accept password authentication for accounts with shadow field when the client sends a 257–1024 byte password. On success, registers an SSH session via the framework handler. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSSH musl...

OpenSSH CVE-2026-123158 (SSHole) Detect

CVE-2026-123158: on musl-based Linux Alpine, etc. with OpenSSH built without PAM and PasswordAuthentication enabled, accounts whose shadow password field is may accept an overlong password 257+ bytes. Verifies with a short control password then a single overlong attempt per username. !/usr/bin/en...

MikroTik RouterOS WebFig jsproxy Overflow (CVE-2026-84411)

CVE-2026-84411: pre-auth integer underflow in RouterOS WebFig POST /jsproxy when Content-Type: msg precedes Content-Length and the declared length is smaller than the body public PoC by Stephan Botes. Modes: probe safe, handshake, crash destructive DoS. Full weaponized RCE is not publicly...

Repetier-Server LFI Credential Chain (CVE-2023-31059)

Exploits CVE-2023-31059 traversal to retrieve ProgramData/Repetier-Server/database/user.sql, extracts stored credentials, and establishes an authenticated Repetier HTTP session. The Windows service runs as SYSTEM CYBIR; use harvested secrets for panel takeover and host post-exploitation in...

Craft CMS CVE-2026-123488 SQLi Detect

CVE-2026-123488: unauthenticated SQL injection via searchattribute on Craft CMS 4.0.0–4.18.8 / 5.0.0–5.11.1. Time-based sleep oracle no stacked UPDATE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Craft CMS CVE-2026-123488 unauthenticated element search SQLi.""" from kittysploit import fro...

Exploit for CVE-2026-123488

CVE-2026-123488 — Craft CMS unauthenticated SQL injection lab...

Exploit for CVE-2026-98260

CVE-2026-98260 / BVL-AN16 CVE-2026-98260 is a vulnerability t...

Exploit for CVE-2026-98260

M6 Shell This project is a one-click temporary root tool for...

Exploit for CVE-2026-121265

CVE-2026-121265: SQL::Abstract arrayref SQL injection Root...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-112611 CVE-2026-112611: OOB Write in CoreGrap...

Exploit for CVE-2026-123753

CVE-2026-123753 Apache Axis2/Java WS-Addressing wsa:ReplyTo...

Exploit for CVE-2026-123158

No d...

Exploit for CVE-2026-19868

sonicwall-sonicos-scanner Local triage for CVE-2026-19868...

ai-security-audit-skills

AI Security Audit Skills Three agent skills that read bytes o...

Exploit for CVE-2026-98260

TimerRoot Android front end for CVE-2026-98260 POSIX CPU...

Exploit for Write-what-where Condition in Linux Linux_Kernel

Temporary Root Guide for Meizu 20 Pro Locked BL On a ME...

pocbit-archive

PocBit Exploit Archive Archived IoT & CVE exploit PoCs, sca...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

CVE-2023-6931 — Hisense HITV205N Xiaomi TOUCH Lite Temporary...

arcane-poc-symlink-lfi

Arcane GitOps symlink file read: PoC PoC for GHSA-2jcq-885...

WordPress Surfer 1.8.0.744 Broken Access Control

WordPress Surfer plugin versions through 1.8.0.744 contain a broken access control vulnerability that allows authenticated Subscribers to retrieve the stored API access key through a crafted profile-page request. https://packetstorm.news/download/239942...