278339 matches found
Langflow AI auto_login RCE
Langflow versions 1.10.0 and below are susceptible to unauthenticated remote code execution. By chaining /api/v1/autologin with /api/v1/validate/code, a remote unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. Module Options msf use...
WordPress Core wp2shell Unauthenticated SQL Injection via REST Batch Route Confusion
WordPress core 6.9.0 - 6.9.4 and 7.0.0 - 7.0.1 are affected by an unauthenticated SQL injection reachable through the REST API batch endpoint /batch/v1. The batch controller builds parallel $matches the matched handler per sub-request and $validation the validation result per sub-request arrays,...
WordPress WP2Shell REST API Batch Route Confusion SQLi to RCE
This module chains two WordPress core vulnerabilities, together known as WP2Shell, to gain unauthenticated remote code execution against default installs of WordPress 6.9.0-6.9.4 and 7.0.0-7.0.1. The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2. CVE-2026-60137 is an SQL injection in...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Unsafe Deserialization - RCE React 19.0.0...
Exploit for CVE-2026-58457
CVE-2026-58457 - Unauthenticated OS Command Injection in Shenz...
aurora-earn-poc
Aurora Earn PoC A TypeScript HTTP service that reads Kraken E...
Exploit for CVE-2024-25600
BricksRCE Exploiter CVE-2024-25600 — WordPress Bricks Bui...
Microsoft Windows HTTP to SMB Relay
This module supports running an HTTP server which validates credentials, and then attempts to execute a relay attack against an SMB server on the configured RHOSTS hosts. If the relay succeeds, an SMB session to the target will be created. This can be used by any modules that support SMB sessions...
Exploit for CVE-2026-13001
No d...
maganghub-cors-poc
CORS PoC - MagangHub Proof of Concept f...
Exploit for Path Traversal in Gogs
Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de...
Exploit for Eval Injection in Langflow
CVE-2026-33017 - Langflow RCE Vulnerability xpl0ited by infr...
HTB_paperowk_exploit
No d...
Exploit for CVE-2026-14894
CVE-2026-14894 — Super Forms Unauthenticated File Upload RCE Non...
Exploit for OS Command Injection in Apache Activemq
CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution...
Exploit for Use After Free in Linux Linux_Kernel
No d...
Exploit for Improper Privilege Management in Microsoft
CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation pr...