Exploit for CVE-2026-40175

audit-axios Scan local repos for vulnerable axios versions an...

CORScanner

CORS Exploiter Automated CORS misconfiguration scanner with...

avsig

⚡ AVSIG JWT Inspector & Security Auditor - decode, anal...

Vulnerable-Web-App-Scanner

Vulnerable-Web-App-Scanner Pent...

OpenClaw-Security-Tools

No d...

coruna-exploit-kit-analysis

Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...

vulnswarm

VulnSwarm AI-powered vulnerability discovery using multi-agen...

📄 CMS Sense 2.0 Cross Site Scripting

CMS Sense version 2.0 suffers from a cross site scripting vulnerability. ================================================================================================================================== | Title : CMS sense v 2.0 HTML Injection Leading to XSS via Attribute Breakout | | Author :...

📄 Twig Sandbox Bypass / XXE / Remote Code Execution / LFI

Research describing a critical vulnerability that exists in the October CMS Twig sandbox Safe Mode that allows authenticated users with template editing privileges to bypass security restrictions and execute arbitrary PHP code or read arbitrary files via XML injection or local file inclusion from...

📄 Selenium Grid/Selenoid Unauthenticated Remote Code Execution

Selenium Grid and Selenoid expose a WebDriver API that allows creating browser sessions with arbitrary capabilities. When deployed without authentication the default for both, an attacker can achieve remote code execution through two browser-specific techniques: For Chrome, the goog:chromeOptions...

📄 WebRemoteControl Unauthenticated Remote Filesystem Access

WebRemoteControl suffers from an unauthenticated remote filesystem access vulnerability. This proof of concept exploit lets you browse directory contents and access files. Exploit Title: WebRemoteControl - Unauthenticated Remote Filesystem Access Date: 2026-04-14 Exploit Author: Chokri Hammedi...

📄 WebRemoteControl Unauthenticated Remote Code Execution

WebRemoteControl suffers from an unauthenticated remote code execution vulnerability. Exploit Title: WebRemoteControl - Unauthenticated Remote Code Execution Date: 2026-04-14 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/wolfgangasdf/WebRemoteControl Software Link:...

Exploit for CVE-2026-39987

CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Military Grade...

Exploit for Path Traversal in Backupbliss Backup_Migration

CVE-2023-6972 Proof of Concept PoC Description This rep...

Exploiting-FTP-Service-Port-21-on-Metasploitable2

Exploiting-FTP-Service-Port-21-on-Metasploitable2 1. Objective...

enterthevoid

No d...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 – Flowise CustomMCP Node RCE PoC !Visitors...

Exploit for CVE-2026-34621

CVE-2026-34621 — Windows PoC Prototype Pollution in Adobe A...

Exploit for Improper Access Control in Fortinet Forticlientems

CVE-2026-35616 - FortiClient EMS Pre-Authentication API Bypass...

Security-Advisories

Security Advisories — trexnegr0 Public disclosure repository...