278484 matches found
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2026-26114 Chi su dung trong lab hoac he thong duoc phep...
ajar
ajar 🚪 Find the door you left open by default. A defensive...
Exploit for OS Command Injection in Devcode Openstamanager
No d...
Web-Vulnerability-Scanner
Web-Vulnerability-Scanner A Python we...
kev-tracker
🎯 KEV Tracker Daily automated tracking of the CISA Known Ex...
Exploit for CVE-2026-11387
CVE-2026-11387 — SMS Alert = 3.9.5 ☆ Unauthenticated Privilege...
Exploit for Authentication Bypass by Spoofing in Litellm
CVE-2026-49468 — LiteLLM Unauthenticated Auth Bypass via Host-...
GNU-Binutils-objdump
As mentioned before, https://github.com/4D4J/objdump-Out-Of-Boun...
badguythehacker
BountyAgent An autonomous AI-powered bug bounty platform. Spa...
Exploit for Improper Privilege Management in Apple Ipados
CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path...
blackbox-website-pentest-poc
PoC of blacbox pentesting about hand-on lab's...
Exploit for Improper Validation of Syntactic Correctness of Input in Rack
This repository provides a black-box security analysis of CVE-20...
iwaf-web-attack-detection
WAF Attack Detection — Machine Learning Classifier A machine...
Page-Builder-CK-Exploit
Page Builder CK — fonts.save RCE Probe BlackHat Team proo...
📄 Cacti 1.2.30 Remote Code Execution
This Metasploit module is an authenticated remote code execution exploit for Cacti versions 1.2.30 and below. ================================================================================================================================== | Title : Cacti ≤ 1.2.30 Authenticated RCE via Host...
📄 ImageMagick 7.x MIFF Decoder Denial of Service
This code generates a malicious MIFF image file designed to exploit a flaw in ImageMagick’s BZip decompression handling. The issue is triggered by a zero-length compressed block, which can cause ImageMagick to enter an infinite loop and consume 100% CPU...
📄 Cockpit CMS 2.13.5 Cross Site Scripting / Account Takeover
Cockpit CMS versions 2.13.5 and below suffer from persistent cross site scripting and cross site request forgery vulnerabilities. CVE-2026-39275 - Stored XSS Leading to Account Takeover in Cockpit CMS Note: Responsibly disclosed to and patched by the Cockpit CMS maintainers prior to publication. ...
📄 Horde Groupware IMP Webmail Path Traversal / Local File Inclusion
Horde Groupware's IMP Webmail solution contains a path traversal / local file inclusion vulnerability which could be exploited to escalate privileges or bypass authentication. This is patched in version 7.0.1. this is my first time sending to a mailing list so ive chosen something easy. here goes...