Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

No d...

Exploit-Development

Exploit Development What does this repository Contain? This...

kage

kage https://github.com/skshadan/k...

Portswigger-lab

PortSwigger Web Security Academy Lab Notes This repository co...

AI-POCStudio

🛡️ AI-POCStudio Intelligent Vulnerability Reproduction an...

Exploit for CVE-2026-48907

CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...

Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

CVE

CVE Request Disclosure Document Executive Summary A Pro...

Exploit for OS Command Injection in Cisco Nx-Os

CVE-2024-20399 ⚡ Simple Usage Use this project only in s...

Exploit for OS Command Injection in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Path Traversal in Fortinet Fortisandbox

cve-id ⚡ Simple Usage Use this project only in safe and...

📄 CMS SINDEHOTÉIS 1.2.4 Cross Site Request Forgery

CMS SINDEHOT�IS version 1.2.4 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : CMS SINDEHOTÉIS 1.2.4 CSRF | | Author : indoushka | | Tested on :...

📄 Grav CMS Remote Code Execution

This Python exploit targets a vulnerability in Grav CMS versions prior to 2.0.0-beta.2 by abusing the administrative Direct Install plugin feature to achieve remote code execution...

📄 EspoCRM 9.3.3 Server-Side Request Forgery

This Metasploit module exploits an authenticated server-side request forgery vulnerability in EspoCRM versions up to 9.3.3. The vulnerability exists in the Attachment/fromImageUrl API endpoint which allows users to fetch images from remote URLs. By using alternative IPv4 notations octal, hex,...

📄 D-Link DSL2600U rom-0 Admin Password Disclosure

Proof of concept that demonstrates a vulnerability in D-Link DSL2600U routers with firmware version 1.08 that allows unauthenticated attackers to download the rom-0 configuration file containing the administrator password...

📄 EternalBlue MS17-010 SMB Remote Code Execution

This Metasploit module exploits the SMBv1 vulnerability in Microsoft Windows MS17-010 known as EternalBlue. ================================================================================================================================== | Title : EternalBlue MS17-010 SMB Remote Code Execution |...

📄 Discuz! X5.0 Local File Inclusion

This is a Metasploit auxiliary module targeting a local file inclusion vulnerability in Discuz! X5.0. ================================================================================================================================== | Title : Discuz! X5.0 LFI Metasploit Module | | Author :...

📄 NTLM Relay to Self (HTTP to LDAP) Post Exploitation

This Metasploit module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate...

📄 dedoc/scramble 0.13.2 Remote Code Execution

This is a Metasploit exploit module for CVE-2026-44262, an unauthenticated remote code execution vulnerability in the Laravel-based tool dedoc/scramble. ================================================================================================================================== | Title :...

📄 Discuz! X5.0 Chained Remote Code Execution

This Metasploit module uses race condition and local file inclusion vulnerabilities in Discuz! X5.0 in order to achieve remote code execution. ================================================================================================================================== | Title : Discuz! X5.0...