278012 matches found
Exploit for Server-Side Request Forgery in Spip
CVE-2026-27472 and CVE-2026-27474 CVSS-B 5.3 MEDIUM and CVSS-...
Exploit for Deserialization of Untrusted Data in Spip
CVE-2026-27475 CVSS-B 9.2 CRITICAL Authenticated Insecur...
pathFinder
🧭 Pathfinder // CTF & Penetration Testing Playbook A mode...
Exploit for Code Injection in Langflow
CVE-2026-0768 Donate Help maintain this pr...
Exploit for Use After Free in Linux Linux_Kernel
Weaponisation research for CVE-2026-43499 ghostlock. the...
Exploit for CVE-2026-82329
CVE-2026-82329 Donate Help maintain this p...
blocksynergy-htb
blocksynergy-htb Complete exploit and quick usage notes for b...
xss-vulnerability-demo
xss-vulnerability-...
wp-file-manager-poc-chain
wp-file-manager-poc-chain A professional offensive security p...
wp-file-manager-poc-chain
wp-file-manager-poc-chain Offensive security proof-of-concept...
Exploit for Incorrect Authorization in Canonical Ubuntu_Linux
CVE-2021-34...
Payload CMS 3.72.0 - Blind SQL Injection
Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection Google Dork: N/A Date: 2026-08-01 Exploit Author: cardosource Vendor Homepage: https://payloadcms.com/ Software Link: https://github.com/payloadcms/payload Version: requests.Response: url: str = "http://localhost:3000/api/posts"...
EasyAppointments 1.5.1 - Blind SQL Injection
Exploit Title: EasyAppointments 1.5.1 - Blind SQL Injection Google Dork: N/A backend login required Date: 07/27/2026 Exploit Author: Michael Chesang Vendor Homepage: https://easyappointments.org Software Link: https://github.com/alextselegidis/easyappointments/releases Version: = 1.5.1 REQUIRED...
SPIP 4.4.8 Insecure Deserialization
SPIP versions 4.4.0 through 4.4.8 contain an insecure deserialization vulnerability in the public area through the tablevaleur filter and DATA iterator. An attacker able to place malicious serialized content can trigger arbitrary object instantiation and potentially achieve remote code execution...
Bludit CMS 3.22.0 Cross Site Scripting
Bludit CMS version 3.22.0 suffers from an SVG related cross site scripting vulnerability. Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22....
miniOrange 5.4.3 - Unauthenticated Auth Bypass
Exploit Title: miniOrange 5.4.3 - Unauthenticated Auth Bypass Google Dork: inurl:/wp-content/plugins/miniorange-saml-20-single-sign-on/ Date: 2026-07-27 Exploit Author: zer0dayf Vendor Homepage: https://plugins.wordpress.org/miniorange-saml-20-single-sign-on/ Software Link:...
Wolf CMS 0.8.3.1 - RCE v
Exploit Title: Wolf CMS 0.8.3.1 - RCE Date: 02-08-2026 Exploit Author: Balachandar Gowrisankar Software Link: https://github.com/wolfcms/wolfcms Version: -u -p Example Usage: python exploit.py http://127.0.0.1:8080/ -u admin -p admin import requests import argparse from bs4 import BeautifulSoup...
Payload CMS 3.72.0 SQL Injection
Payload CMS version 3.72.0 suffers from a remote blind SQL injection vulnerability. Exploit Title: Payload CMS 3.72.0 - Blind SQL Injection Google Dork: N/A Date: 2026-08-01 Exploit Author: cardosource Vendor Homepage: https://payloadcms.com/ Software Link: https://github.com/payloadcms/payload...
Bludit CMS - Stored XSS
Exploit Title: Bludit CMS - Stored XSS Date: 2026-07-30 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit/releases/tag/3.22.0 Version: 3.22.0 Tested on: Windows 10 x64 Description: sanitizeSVG strips script/on but does not remove...