292614 matches found
vuln-scan-prioritizer
Vulnerability Scan Prioritizer vuln-scan-prioritizer !vu...
securevault-sql-injection
SecureVault – SQL Injection Protection and Data Security A li...
godsearch
💀 GODSEARCH — The God-Tier Exploit Harvester searchsploit on...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress
CVE-2026-119977 — WordPress Core Upgrade-Window TOCTOU RCE |...
Exploit for Write-what-where Condition in Linux Linux_Kernel
iQOO Neo8 PD2301 / V2301A — Complete archive of DirtyFrag te...
login-range
login-range A self-contained attack range for login pages...
vuldb-reports
VulDB Reports Vulnerability reports for open-source PHP proje...
Exploit for CVE-2026-13684
CVE-2026-13684 — Synology DSM: Improper Encoding/Escaping of O...
Exploit for Missing Authentication for Critical Function in Microweber
CVE-2020-13405-MicroWe...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress
CVE-2026-119977 WordPress Core Detector Read-only local asses...
Exploit for CVE-2026-124040
CVE-2026-124040 — CivetWeb HTTP/2 HPACK header poisoning leads...
Exploit for CVE-2026-99273
CVE-2026-99273 — Linux ksmbd stream-info 2-byte heap out-of-bo...
GS JWT CVE-2026-113615 Detect
CVE-2026-113615: GS JWT Authentication for WP REST API = 1.0.0 — SQL injection on POST /wp-json/gs-jwt/v1/verify-otp allows forging a JWT for an arbitrary user id. Read-only: validates administrator role via /wp/v2/users/me. !/usr/bin/env python3 -- coding: utf-8 -- """Detect CVE-2026-113615 GS J...
GS JWT CVE-2026-113615 SQLi Admin JWT
CVE-2026-113615: SQL injection on POST /wp-json/gs-jwt/v1/verify-otp forges a server-signed JWT. Registers an HTTP session with Authorization Bearer. Optional createadmin=true adds a persistent administrator via REST. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-113615 GS JWT WordPress...
MikroTik RouterOS WebFig jsproxy Detect (CVE-2026-84411)
Non-destructive probe of RouterOS POST /jsproxy Content-Type: msg. Confirms WebFig jsproxy attack surface for CVE-2026-84411 / CVE-2026-67278 family. !/usr/bin/env python3 -- coding: utf-8 -- """Detect MikroTik RouterOS WebFig jsproxy CVE-2026-84411 exposure.""" from kittysploit import from...
Magento WYSIWYG Upload RCE (CVE-2026-48356)
CVE-2026-48356 polyshell / Sansec SA-2026-0027: authenticated REST WYSIWYG image upload accepts PHP disguised with GIF magic bytes into web-accessible pub/media paths. Requires REST admin/integration token or admin credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Magento / Adobe Commerce...
Craft CMS CVE-2026-123488 Element Search SQLi
CVE-2026-123488: searchattribute is interpolated into SQL on vulnerable Craft CMS builds. check uses a time-based oracle; run is detect-only unless confirm=true, which sends a stacked UPDATE to set admin=1 on the chosen users row MySQL/MariaDB. !/usr/bin/env python3 -- coding: utf-8 -- """Craft C...
OpenSSH CVE-2026-123158 SSHole auth bypass
CVE-2026-123158 SSHole: OpenSSH on musl Linux without PAM may accept password authentication for accounts with shadow field when the client sends a 257–1024 byte password. On success, registers an SSH session via the framework handler. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSSH musl...