Exploit for Improper Authentication in Checkpoint Gaia_Os

CVE-2026-50751 Scanner Multi-target detection scanner for CV...

Exploit for Improper Update of Reference Count in Linux Linux_Kernel

How to use this repo This is a Linux Kernel Local Privilege E...

binary-exploitation-labs

Binary Exploitation & Reverse Engineering Labs Hands-on labs...

Exploit for OS Command Injection in Redhat Openshift_Container_Platform

Usage: For anonymos login: python3 exploit.py --lho...

Exploit for Use After Free in Redis

CVE-2025-49844 - RediShell Use-after-free in Redis Lua scri...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Portainer

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File R...

objdump-dlx-calc-poc

objdump dlx calc poc Small repro for an objdump -g crash-to...

Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin

CVE-2026-54420 Mitigation Toolkit !Licensehttps://img.shie...

Exploit for CVE-2026-20262

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for CVE-2026-54686

CVE-2026-54686: Warp Remote SSH Command Injection PoC Desc...

Mr-Robot-CTF-Automation-Scripts

No d...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — React2Shell Critical pre-authentication Remo...

📄 YAMCS 5.12.6 LdapAuthModule LDAP Injection / Authentication Bypass

This Metasploit module exploits an LDAP injection vulnerability in the YAMCS LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing an attacker to bypass authentication. By crafting a malicious username containing LDAP special...

📄 nginx 1.27.4 Insecure TLS Session Reuse / SSL Certificate Validation Bypass

Proof of concept exploit for nginx version 1.27.4 that demonstrates insecure TLS session reuse leading to certification validation bypass. ================================================================================================================================== | Title : nginx 1.27.4...

📄 Apache Flink Kubernetes Operator 1.14.0 Server-Side Request Forgery

This is a Metasploit auxiliary module to demonstrate a service-side request forgery vulnerability in Apache Flink Kubernetes Operator version 1.14.0. ================================================================================================================================== | Title : Apache...

📄 Apache 2.4.66 HTTP/2 mod_http2 Double-Free Denial of Service

This script is a multi-mode security tool that triggers a denial of service against Apache HTTP Server version 2.4.66 related to a double-free condition in HTTP/2 handling...

📄 Casdoor 3.54.1 Path Traversal / Arbitrary File Write

This Metasploit module exploits a path traversal vulnerability in the storage provider management component of Casdoor versions prior to 3.54.1. By creating a Local File System provider with a manipulated pathPrefix, an authenticated administrator can bypass the storage sandbox to write, overwrit...

📄 BookStack Denial of Service

This Python3 script demonstrates a denial of service condition against a BookStack search endpoint by generating extremely large search queries and sending them with high levels of concurrency. Versions prior to 25.12.1 are affected...

📄 BookStack Denial of Service

This Metasploit auxiliary module targets a denial of service vulnerability in BookStack versions prior to 25.12.1 by abusing the search system. ================================================================================================================================== | Title : BookStack...