278558 matches found
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
No d...
Exploit-Development
Exploit Development What does this repository Contain? This...
kage
kage https://github.com/skshadan/k...
Portswigger-lab
PortSwigger Web Security Academy Lab Notes This repository co...
AI-POCStudio
🛡️ AI-POCStudio Intelligent Vulnerability Reproduction an...
Exploit for CVE-2026-48907
CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...
Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE
CVE Request Disclosure Document Executive Summary A Pro...
Exploit for OS Command Injection in Cisco Nx-Os
CVE-2024-20399 ⚡ Simple Usage Use this project only in s...
Exploit for OS Command Injection in Fortinet Fortisandbox
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for Path Traversal in Fortinet Fortisandbox
cve-id ⚡ Simple Usage Use this project only in safe and...
📄 CMS SINDEHOTÉIS 1.2.4 Cross Site Request Forgery
CMS SINDEHOT�IS version 1.2.4 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : CMS SINDEHOTÉIS 1.2.4 CSRF | | Author : indoushka | | Tested on :...
📄 Grav CMS Remote Code Execution
This Python exploit targets a vulnerability in Grav CMS versions prior to 2.0.0-beta.2 by abusing the administrative Direct Install plugin feature to achieve remote code execution...
📄 EspoCRM 9.3.3 Server-Side Request Forgery
This Metasploit module exploits an authenticated server-side request forgery vulnerability in EspoCRM versions up to 9.3.3. The vulnerability exists in the Attachment/fromImageUrl API endpoint which allows users to fetch images from remote URLs. By using alternative IPv4 notations octal, hex,...
📄 D-Link DSL2600U rom-0 Admin Password Disclosure
Proof of concept that demonstrates a vulnerability in D-Link DSL2600U routers with firmware version 1.08 that allows unauthenticated attackers to download the rom-0 configuration file containing the administrator password...
📄 EternalBlue MS17-010 SMB Remote Code Execution
This Metasploit module exploits the SMBv1 vulnerability in Microsoft Windows MS17-010 known as EternalBlue. ================================================================================================================================== | Title : EternalBlue MS17-010 SMB Remote Code Execution |...
📄 Discuz! X5.0 Local File Inclusion
This is a Metasploit auxiliary module targeting a local file inclusion vulnerability in Discuz! X5.0. ================================================================================================================================== | Title : Discuz! X5.0 LFI Metasploit Module | | Author :...
📄 NTLM Relay to Self (HTTP to LDAP) Post Exploitation
This Metasploit module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate...
📄 dedoc/scramble 0.13.2 Remote Code Execution
This is a Metasploit exploit module for CVE-2026-44262, an unauthenticated remote code execution vulnerability in the Laravel-based tool dedoc/scramble. ================================================================================================================================== | Title :...
📄 Discuz! X5.0 Chained Remote Code Execution
This Metasploit module uses race condition and local file inclusion vulnerabilities in Discuz! X5.0 in order to achieve remote code execution. ================================================================================================================================== | Title : Discuz! X5.0...