292609 matches found
Craft CMS CVE-2026-123488 SQLi Detect
CVE-2026-123488: unauthenticated SQL injection via searchattribute on Craft CMS 4.0.0–4.18.8 / 5.0.0–5.11.1. Time-based sleep oracle no stacked UPDATE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Craft CMS CVE-2026-123488 unauthenticated element search SQLi.""" from kittysploit import fro...
Exploit for CVE-2026-123488
CVE-2026-123488 — Craft CMS unauthenticated SQL injection lab...
Exploit for CVE-2026-98260
CVE-2026-98260 / BVL-AN16 CVE-2026-98260 is a vulnerability t...
Exploit for CVE-2026-98260
M6 Shell This project is a one-click temporary root tool for...
Exploit for CVE-2026-121265
CVE-2026-121265: SQL::Abstract arrayref SQL injection Root...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2026-112611 CVE-2026-112611: OOB Write in CoreGrap...
Exploit for CVE-2026-123753
CVE-2026-123753 Apache Axis2/Java WS-Addressing wsa:ReplyTo...
Exploit for CVE-2026-123158
No d...
Exploit for CVE-2026-19868
sonicwall-sonicos-scanner Local triage for CVE-2026-19868...
ai-security-audit-skills
AI Security Audit Skills Three agent skills that read bytes o...
Exploit for CVE-2026-98260
TimerRoot Android front end for CVE-2026-98260 POSIX CPU...
Exploit for Write-what-where Condition in Linux Linux_Kernel
Temporary Root Guide for Meizu 20 Pro Locked BL On a ME...
pocbit-archive
PocBit Exploit Archive Archived IoT & CVE exploit PoCs, sca...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
CVE-2023-6931 — Hisense HITV205N Xiaomi TOUCH Lite Temporary...
arcane-poc-symlink-lfi
Arcane GitOps symlink file read: PoC PoC for GHSA-2jcq-885...
Xiaomi Mi Pad 4 Android 8.1 Kernel Privilege Escalation
Xiaomi Mi Pad 4 running Android 8.1, MIUI 10, and kernel version 4.4.78 is vulnerable to a local privilege escalation via the Binder use-after-free flaw. This proof of concept obtains root and deploys an optional SuperSU or Magisk root-management backend. https://packetstorm.news/download/239916...
Fortinet FortiOS 6.2.0 Configuration Backup Decryption
Fortinet FortiOS version 6.2.0, versions 6.0.0 through 6.0.6, and versions 5.6.10 and below use a hard-coded cryptographic key for sensitive ENC configuration data. This proof of concept decrypts supported fields from local plaintext CLI configuration exports...
Craft CMS 5.11.1 SQL Injection
Craft CMS versions 4.0.0 through 4.18.8 and 5.0.0 through 5.11.1 contain an unauthenticated SQL injection in the element search endpoint. The proof of concept demonstrates time-based detection and a stacked database update that sets an administrator flag. https://packetstorm.news/download/239921...
WordPress Surfer 1.8.0.744 Broken Access Control
WordPress Surfer plugin versions through 1.8.0.744 contain a broken access control vulnerability that allows authenticated Subscribers to retrieve the stored API access key through a crafted profile-page request. https://packetstorm.news/download/239942...
WordPress Wp Social 3.2.3 Cross Site Request Forgery
WordPress Wp Social plugin versions through 3.2.3 contain a cross site request forgery flaw that lets an attacker cause a logged-in administrator to overwrite social-login provider settings. The proof of concept submits the affected settings form. https://packetstorm.news/download/239939...