278552 matches found
Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft
cve-id β‘ Simple Usage Use this project only in safe and...
CVE
CVE Request Disclosure Document Executive Summary A Pro...
Exploit for OS Command Injection in Cisco Nx-Os
CVE-2024-20399 β‘ Simple Usage Use this project only in s...
Exploit for OS Command Injection in Fortinet Fortisandbox
cve-id β‘ Simple Usage Use this project only in safe and...
Exploit for Path Traversal in Fortinet Fortisandbox
cve-id β‘ Simple Usage Use this project only in safe and...
π CMS SINDEHOTΓIS 1.2.4 Cross Site Request Forgery
CMS SINDEHOTοΏ½IS version 1.2.4 suffers from a cross site request forgery vulnerability. ================================================================================================================================== | Title : CMS SINDEHOTΓIS 1.2.4 CSRF | | Author : indoushka | | Tested on :...
π Grav CMS Remote Code Execution
This Python exploit targets a vulnerability in Grav CMS versions prior to 2.0.0-beta.2 by abusing the administrative Direct Install plugin feature to achieve remote code execution...
π EspoCRM 9.3.3 Server-Side Request Forgery
This Metasploit module exploits an authenticated server-side request forgery vulnerability in EspoCRM versions up to 9.3.3. The vulnerability exists in the Attachment/fromImageUrl API endpoint which allows users to fetch images from remote URLs. By using alternative IPv4 notations octal, hex,...
π D-Link DSL2600U rom-0 Admin Password Disclosure
Proof of concept that demonstrates a vulnerability in D-Link DSL2600U routers with firmware version 1.08 that allows unauthenticated attackers to download the rom-0 configuration file containing the administrator password...
π EternalBlue MS17-010 SMB Remote Code Execution
This Metasploit module exploits the SMBv1 vulnerability in Microsoft Windows MS17-010 known as EternalBlue. ================================================================================================================================== | Title : EternalBlue MS17-010 SMB Remote Code Execution |...
π Discuz! X5.0 Local File Inclusion
This is a Metasploit auxiliary module targeting a local file inclusion vulnerability in Discuz! X5.0. ================================================================================================================================== | Title : Discuz! X5.0 LFI Metasploit Module | | Author :...
π NTLM Relay to Self (HTTP to LDAP) Post Exploitation
This Metasploit module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate...
π dedoc/scramble 0.13.2 Remote Code Execution
This is a Metasploit exploit module for CVE-2026-44262, an unauthenticated remote code execution vulnerability in the Laravel-based tool dedoc/scramble. ================================================================================================================================== | Title :...
π Discuz! X5.0 Chained Remote Code Execution
This Metasploit module uses race condition and local file inclusion vulnerabilities in Discuz! X5.0 in order to achieve remote code execution. ================================================================================================================================== | Title : Discuz! X5.0...
π CMSsiam 2 SQL Injection
CMSsiam version 2 suffers from a remote SQL injection vulnerability that allows for login bypass. ================================================================================================================================== | Title : CMSsiam v2 Auth by pass | | Author : indoushka | | Tested ...
vulnerability-playtest
Vulnerability Playtest This repository is an area to test out...
Exploit for CVE-2003-0201
pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samb...
Exploit for CVE-2026-39949
No d...